skill-creator
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runandsubprocess.Popenin several scripts (run_eval.py,improve_description.py,generate_review.py) to invoke theclaudeCLI and system utilities likelsof. This is necessary for its primary purpose of running evaluation loops and managing local servers for the benchmark viewer. - [DYNAMIC_EXECUTION]: The skill generates and saves
eval_set.jsonand variousgrading.jsonfiles based on agent-generated content. It also dynamically builds and writes HTML files to the local file system to provide a review interface for users. These operations are intended for the skill development lifecycle. - [METADATA_POISONING]: The
SKILL.mdfrontmatter includes standard fields (name,description). Thedescriptionfield is used by the skill to explain its purpose and is itself a target for optimization by the skill's own scripts, but no malicious intent was found in the provided instructions.
Audit Metadata