skill-creator

Pass

Audited by Gen Agent Trust Hub on Apr 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary purpose is providing documentation and templates for development workflows. All executable code is contained within utility scripts designed for local execution by the developer.
  • [COMMAND_EXECUTION]: The script scripts/init_skill.py performs standard filesystem operations including directory creation (mkdir) and writing template files to disk based on user-provided names. It also applies executable permissions (chmod 0o755) to generated example scripts, which is expected behavior for a project initializer.
  • [COMMAND_EXECUTION]: The script scripts/package_skill.py uses the standard Python zipfile library to bundle skill components for distribution. It includes a validation step that reads SKILL.md files to ensure compliance with formatting requirements.
  • [SAFE]: The scripts/quick_validate.py script implements security best practices by using yaml.safe_load() for parsing frontmatter and includes checks to prevent the use of angle brackets (<, >) in description fields, mitigating potential injection risks in downstream UI contexts.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 2, 2026, 07:25 PM