skill-creator

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [SAFE]: A thorough analysis of the skill's instructions and scripts reveals no malicious behavior, data exfiltration, or obfuscation. The provided tools are designed for local development and adhere to secure coding standards.\n- [COMMAND_EXECUTION]: The skill includes three Python scripts for automating the skill development lifecycle. These scripts perform legitimate file system management tasks and do not involve any hidden or high-risk command execution.\n- [DYNAMIC_EXECUTION]: Metadata parsing within the utility scripts is performed using yaml.safe_load(). This is a recommended security practice that prevents the execution of arbitrary code during the processing of skill configuration files.\n- [SAFE]: The initialization script (init_skill.py) sanitizes the skill name input by restricting it to lowercase letters, numbers, and hyphens. This effectively prevents path traversal attacks when creating new skill directories.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 11:31 PM