skill-creator
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.run()andsubprocess.Popen()ineval-viewer/generate_review.py,scripts/run_eval.py, andscripts/run_loop.pyto manage background processes, kill specific ports, and invoke theclaudeCLI for automated skill testing. These are standard operations for a development and evaluation harness. - [EXTERNAL_DOWNLOADS]: The
eval-viewer/viewer.htmlfile includes a reference tocdn.sheetjs.comto load the SheetJS library for rendering Excel files in the evaluation results viewer. This is a well-known service used for the skill's primary functionality of viewing test outputs. - [SAFE]: The skill implements security best practices by recommending the use of
.envfiles for secret management and including a section on the 'Principle of Lack of Surprise', explicitly instructing users not to create malicious skills.
Audit Metadata