skill-creator

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes Python scripts (init_skill.py, package_skill.py) intended to be executed by the agent to automate skill directory initialization and distribution packaging.
  • [INDIRECT_PROMPT_INJECTION]: The quick_validate.py script parses YAML frontmatter from user-provided SKILL.md files. It employs yaml.safe_load() for secure parsing and enforces strict schema validation on the metadata fields.
  • [SAFE]: The file system operations (directory creation, file writing, and zipping) performed by the bundled scripts are transparent and strictly limited to the task of skill resource management.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 02:41 PM