skill-creator
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a development environment for AI agent skills. The static analysis findings regarding
subprocess.Popenandsubprocess.runwere reviewed and found to be benign, as they are used to execute local CLI tools (claude,lsof) and standard build processes within the developer's environment. - [SAFE]: Remote data handling in
scripts/run_eval.pyandscripts/improve_description.pyfollows standard practices for interacting with the Claude CLI, with no evidence of sensitive data exfiltration or unauthorized access. - [SAFE]: The
eval-viewercomponent generates local HTML reports for human review of skill performance, using standard web technologies without external dependencies or hidden trackers. - [SAFE]: The packaging logic in
scripts/package_skill.pycorrectly implements exclusion lists for build artifacts likenode_modulesand__pycache__, following software distribution best practices.
Audit Metadata