skill-creator
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python's
subprocessmodule to manage its development lifecycle. Scripts likerun_eval.py,run_loop.py, andimprove_description.pycall theclaudeCLI binary to test skill triggering and generate improved metadata. Additionally,eval-viewer/generate_review.pyexecuteslsofto manage network ports for the local evaluation viewer. - [EXTERNAL_DOWNLOADS]: The evaluation viewer component (
viewer.html) loads theSheetJS(xlsx) library fromcdn.sheetjs.com. This is a well-known technology service used here to render spreadsheet outputs within the local review interface. - [SAFE]: The skill incorporates security best practices by using
html.escapein its reporting scripts (generate_report.py) when embedding data from test runs, mitigating potential injection risks from untrusted evaluation outputs.
Audit Metadata