skills/escapewu/skills/skill-creator/Gen Agent Trust Hub

skill-creator

Pass

Audited by Gen Agent Trust Hub on Mar 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a meta-tool for skill development. It contains documentation and utility scripts that follow established development patterns.
  • [COMMAND_EXECUTION]: The Python scripts init_skill.py and package_skill.py perform file system operations such as directory creation, file writing, and zip archiving. These actions are limited to local paths provided by the user during the tool's invocation and are consistent with the skill's purpose as a project generator.
  • [EXTERNAL_DOWNLOADS]: The skill uses the standard PyYAML library for metadata parsing. There are no indications of unauthorized remote connections, external script fetching, or downloads from untrusted sources.
  • [REMOTE_CODE_EXECUTION]: Analysis of the Python scripts confirms the absence of dangerous functions like eval() or exec(). The scripts use yaml.safe_load() for configuration parsing, which is the recommended practice for preventing arbitrary code execution during deserialization.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 18, 2026, 09:03 PM