skill-creator

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides procedural guidance and templates for developers to create their own skills. The instructions focus on context efficiency and progressive disclosure, which are standard best practices for agent development.
  • [SAFE]: The Python scripts (init_skill.py, package_skill.py, and quick_validate.py) implement standard development workflows. init_skill.py creates a directory structure for new projects; package_skill.py utilizes the standard zipfile library to bundle files; and quick_validate.py uses yaml.safe_load for configuration validation.
  • [SAFE]: Documentation mentions the platform's native dynamic context injection syntax (!command) to educate authors on how to inject live data into skills. This is a descriptive use of the feature rather than a malicious implementation.
  • [SAFE]: File system operations in the utility scripts are limited to the user-specified output paths and use standard Python Pathlib and ZipFile modules with no evidence of directory traversal or unauthorized access.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 08:46 PM
Security Audit — agent-trust-hub — skill-creator