skill-creator
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands at runtime, such as
uv run python3for running scripts andgit branchfor environment detection. These are standard operations for a development-focused skill. - [EXTERNAL_DOWNLOADS]: The skill uses
catcommands within dynamic context blocks (bang-backticks) to read local reference files. While technically external to the main SKILL.md, these targets are relative paths within the skill's own plugin structure. - [DYNAMIC_CONTEXT_INJECTION]: The skill makes heavy use of the
!commandsyntax to inject reference content and environment state at load time. Examples include!cat ${CLAUDE_SKILL_DIR}/../../references/creator-anti-patterns.mdand!git branch --show-current. These are used for inline documentation and are consistent with the skill's purpose as a meta-tool for skill creation.
Audit Metadata