skill-creator

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_CONTEXT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands at runtime, such as uv run python3 for running scripts and git branch for environment detection. These are standard operations for a development-focused skill.
  • [EXTERNAL_DOWNLOADS]: The skill uses cat commands within dynamic context blocks (bang-backticks) to read local reference files. While technically external to the main SKILL.md, these targets are relative paths within the skill's own plugin structure.
  • [DYNAMIC_CONTEXT_INJECTION]: The skill makes heavy use of the !command syntax to inject reference content and environment state at load time. Examples include !cat ${CLAUDE_SKILL_DIR}/../../references/creator-anti-patterns.md and !git branch --show-current. These are used for inline documentation and are consistent with the skill's purpose as a meta-tool for skill creation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 10:36 AM