skill-creator
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: A thorough analysis of the skill's instructions and scripts reveals no malicious behavior, data exfiltration, or obfuscation. The provided tools are designed for local development and adhere to secure coding standards.\n- [COMMAND_EXECUTION]: The skill includes three Python scripts for automating the skill development lifecycle. These scripts perform legitimate file system management tasks and do not involve any hidden or high-risk command execution.\n- [DYNAMIC_EXECUTION]: Metadata parsing within the utility scripts is performed using
yaml.safe_load(). This is a recommended security practice that prevents the execution of arbitrary code during the processing of skill configuration files.\n- [SAFE]: The initialization script (init_skill.py) sanitizes the skill name input by restricting it to lowercase letters, numbers, and hyphens. This effectively prevents path traversal attacks when creating new skill directories.
Audit Metadata