skill-creator
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [SAFE]: No security issues or malicious patterns were detected in the skill instructions or scripts. The skill is designed to assist in the development and packaging of other agent skills.
- [COMMAND_EXECUTION]: The skill includes Python scripts (
init_skill.py,package_skill.py,quick_validate.py) intended to be run locally by the agent to automate skill lifecycle tasks. These scripts perform standard file operations (file creation, directory traversal, zipping) and include checks to prevent escaping the skill root or including unauthorized file types like symlinks. - [DYNAMIC_EXECUTION]: The validation logic in
quick_validate.pyusesyaml.safe_load()for parsing YAML frontmatter, which prevents unsafe deserialization of metadata.
Audit Metadata