skill-creator
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Python scripts (
init_skill.py,package_skill.py) intended to be executed by the agent to automate skill directory initialization and distribution packaging. - [INDIRECT_PROMPT_INJECTION]: The
quick_validate.pyscript parses YAML frontmatter from user-providedSKILL.mdfiles. It employsyaml.safe_load()for secure parsing and enforces strict schema validation on the metadata fields. - [SAFE]: The file system operations (directory creation, file writing, and zipping) performed by the bundled scripts are transparent and strictly limited to the task of skill resource management.
Audit Metadata