stitch-skill-creator
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute a local Python script (scripts/init_stitch_skill.py) to automate the creation of directory structures and markdown files for new skills.\n- [SAFE]: The Python script implements input validation using regex (re.fullmatch) for the scenario name, which prevents arbitrary string injection into the generated templates.\n- [SAFE]: No remote dependencies or downloads were detected; the skill relies entirely on its own bundled scripts and templates.\n- [SAFE]: No sensitive information access or data exfiltration patterns were found.
Audit Metadata