skill-creator
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a code generator and project initializer. Its primary operations are limited to local file system management, such as creating directories and writing template files.
- [SAFE]: The inclusion of Python scripts (
init_skill.py,generate_openai_yaml.py) follows security best practices for scaffolding tools. Input normalization is applied to skill names to ensure they consist only of alphanumeric characters and hyphens, and YAML values are properly escaped to prevent injection during template generation. - [SAFE]: No network activity, remote downloads, or unauthorized access to sensitive system files (e.g., credentials or SSH keys) were detected in the source code or instructions.
- [SAFE]: The use of
chmod 755on generated template scripts is a standard development practice for making scripts executable and does not constitute a privilege escalation risk in this context.
Audit Metadata