skill-creator
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python's
subprocessmodule in several utility scripts (scripts/run_eval.py,scripts/improve_description.py,eval-viewer/generate_review.py) to execute shell commands such asclaude -pfor model interactions andlsoffor port management. These are internal tools used for the skill's primary development and testing purpose. - [DYNAMIC_EXECUTION]: The skill generates and executes benchmarks and evaluations by spawning subagents. It creates temporary command files in
.claude/commands/to test skill triggering behavior. This is a core part of the skill's functionality for optimizing agent skill descriptions. - [SAFE]: The skill's own code behavior, including network operations for the evaluation viewer and local file manipulation for workspace management, is consistent with its stated purpose as a developer tool. No data exfiltration or malicious patterns were detected.
Audit Metadata