skill-creator

Pass

Audited by Gen Agent Trust Hub on May 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill functions as a code generator and project initializer. Its primary operations are limited to local file system management, such as creating directories and writing template files.
  • [SAFE]: The inclusion of Python scripts (init_skill.py, generate_openai_yaml.py) follows security best practices for scaffolding tools. Input normalization is applied to skill names to ensure they consist only of alphanumeric characters and hyphens, and YAML values are properly escaped to prevent injection during template generation.
  • [SAFE]: No network activity, remote downloads, or unauthorized access to sensitive system files (e.g., credentials or SSH keys) were detected in the source code or instructions.
  • [SAFE]: The use of chmod 755 on generated template scripts is a standard development practice for making scripts executable and does not constitute a privilege escalation risk in this context.
Audit Metadata
Risk Level
SAFE
Analyzed
May 17, 2026, 03:02 PM
Security Audit — agent-trust-hub — skill-creator