general-skill-creator
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The utility script
eval-viewer/generate_review.pyexecutes thelsofsystem command viasubprocess.run. This is used to identify and terminate any existing processes running on the designated local port to ensure the review server can start successfully. - [EXTERNAL_DOWNLOADS]: The
eval-viewer/viewer.htmlfile loads the SheetJS library fromcdn.sheetjs.com. This is a well-known service used for processing spreadsheet files within the browser UI. - [EXTERNAL_DOWNLOADS]: Various HTML assets in the skill (e.g.,
assets/eval_review.html,eval-viewer/viewer.html) load font resources from Google Fonts (fonts.googleapis.com). - [DATA_EXPOSURE]: The local viewer script (
eval-viewer/generate_review.py) is designed to read files from a workspace directory to facilitate human review. While this involves reading local files, it is restricted to the scope of the evaluation workspace and is a primary feature of the tool's intended purpose.
Audit Metadata