skill-creator

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill includes scripts/init_skill.py which dynamically generates template Python scripts, markdown references, and asset placeholders when a new skill is initialized. This behavior is restricted to creating static templates based on predefined internal strings.
  • [PRIVILEGE_ESCALATION]: The scripts/init_skill.py script applies executable permissions (chmod 755) to the generated scripts/example.py template. This is an intended function to ensure the generated skill resources are immediately usable in their target environment.
  • [COMMAND_EXECUTION]: The SKILL.md instructions guide the agent to execute the included management scripts (init_skill.py, quick_validate.py, and package_skill.py) to automate the skill development lifecycle. These scripts use safe practices such as yaml.safe_load() for parsing metadata and input validation for file names.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 02:37 PM