skill-creator

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill's primary purpose is to provide a standardized framework for developing other skills. It contains documentation and templates that align with secure and efficient agent interaction principles, such as progressive disclosure and token efficiency.
  • [COMMAND_EXECUTION]: The skill includes Python scripts (init_skill.py, package_skill.py) that perform local file system operations. These scripts are used to create directories, write boilerplate files from hardcoded templates, and package folders into zip-compressed '.skill' files. These actions are transparent, well-documented, and necessary for the tool's intended use as a developer utility.
  • [SAFE]: The scripts utilize the standard Python library along with PyYAML for parsing frontmatter. No external downloads, remote script execution, or calls to unverified third-party APIs were found.
  • [SAFE]: The logic in quick_validate.py uses yaml.safe_load() for frontmatter parsing, preventing YAML-based deserialization attacks. No obfuscation techniques or suspicious encoding were detected across the skill's files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 04:05 PM
Security Audit — agent-trust-hub — skill-creator