skill-creator

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Several scripts, including scripts/run_eval.py and scripts/improve_description.py, use the subprocess module to execute the claude CLI. These operations are required to evaluate skill performance and optimize trigger accuracy as part of the skill's core developer workflow.
  • [COMMAND_EXECUTION]: The eval-viewer/generate_review.py script executes the lsof command via subprocess to identify and manage the local port used for the evaluation viewer's HTTP server. This is standard functionality for local UI management.
  • [EXTERNAL_DOWNLOADS]: The evaluation viewer UI (eval-viewer/viewer.html) loads the SheetJS library from cdn.sheetjs.com. This facilitates rendering of spreadsheet files within the viewer and is a safe reference to a well-known third-party library.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 05:34 AM
Security Audit — agent-trust-hub — skill-creator