skill-creator
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is providing documentation and templates for development workflows. All executable code is contained within utility scripts designed for local execution by the developer.
- [COMMAND_EXECUTION]: The script
scripts/init_skill.pyperforms standard filesystem operations including directory creation (mkdir) and writing template files to disk based on user-provided names. It also applies executable permissions (chmod 0o755) to generated example scripts, which is expected behavior for a project initializer. - [COMMAND_EXECUTION]: The script
scripts/package_skill.pyuses the standard Pythonzipfilelibrary to bundle skill components for distribution. It includes a validation step that readsSKILL.mdfiles to ensure compliance with formatting requirements. - [SAFE]: The
scripts/quick_validate.pyscript implements security best practices by usingyaml.safe_load()for parsing frontmatter and includes checks to prevent the use of angle brackets (<,>) in description fields, mitigating potential injection risks in downstream UI contexts.
Audit Metadata