skills/hkuds/nanobot/skill-creator/Gen Agent Trust Hub

skill-creator

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [SAFE]: No security issues or malicious patterns were detected in the skill instructions or scripts. The skill is designed to assist in the development and packaging of other agent skills.
  • [COMMAND_EXECUTION]: The skill includes Python scripts (init_skill.py, package_skill.py, quick_validate.py) intended to be run locally by the agent to automate skill lifecycle tasks. These scripts perform standard file operations (file creation, directory traversal, zipping) and include checks to prevent escaping the skill root or including unauthorized file types like symlinks.
  • [DYNAMIC_EXECUTION]: The validation logic in quick_validate.py uses yaml.safe_load() for parsing YAML frontmatter, which prevents unsafe deserialization of metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 08:19 AM