skill-creator
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill includes
scripts/init_skill.pywhich dynamically generates template Python scripts, markdown references, and asset placeholders when a new skill is initialized. This behavior is restricted to creating static templates based on predefined internal strings. - [PRIVILEGE_ESCALATION]: The
scripts/init_skill.pyscript applies executable permissions (chmod 755) to the generatedscripts/example.pytemplate. This is an intended function to ensure the generated skill resources are immediately usable in their target environment. - [COMMAND_EXECUTION]: The
SKILL.mdinstructions guide the agent to execute the included management scripts (init_skill.py,quick_validate.py, andpackage_skill.py) to automate the skill development lifecycle. These scripts use safe practices such asyaml.safe_load()for parsing metadata and input validation for file names.
Audit Metadata