build-skill
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive templates and guidelines for skill creation without any detected malicious instructions or behavior.
- [COMMAND_EXECUTION]: Provides scripts for initializing (init_skill.sh), validating (validate_skill.sh), and packaging (package_skill.sh) skill directories. The scripts use standard shell commands for their intended purposes.
- [EXTERNAL_DOWNLOADS]: References an external validation tool (skills-ref) available via GitHub. This is documented for use in the development workflow to ensure skill quality.
- [DATA_EXFILTRATION]: The package_skill.sh script includes a comprehensive blacklist of sensitive files (e.g., .ssh, .aws, .env, secrets*, *.key) to prevent accidental data leakage when distributing skills.
Audit Metadata