skill-creator
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill's primary purpose is to provide a standardized framework for developing other skills. It contains documentation and templates that align with secure and efficient agent interaction principles, such as progressive disclosure and token efficiency.
- [COMMAND_EXECUTION]: The skill includes Python scripts (
init_skill.py,package_skill.py) that perform local file system operations. These scripts are used to create directories, write boilerplate files from hardcoded templates, and package folders into zip-compressed '.skill' files. These actions are transparent, well-documented, and necessary for the tool's intended use as a developer utility. - [SAFE]: The scripts utilize the standard Python library along with
PyYAMLfor parsing frontmatter. No external downloads, remote script execution, or calls to unverified third-party APIs were found. - [SAFE]: The logic in
quick_validate.pyusesyaml.safe_load()for frontmatter parsing, preventing YAML-based deserialization attacks. No obfuscation techniques or suspicious encoding were detected across the skill's files.
Audit Metadata