skill-builder
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs validation of SKILL.md files using
yaml.safe_load(), which is a secure practice to prevent arbitrary code execution during YAML parsing. - [SAFE]: The packaging script (
package_skill.py) implements directory traversal using standard libraries to create ZIP archives, with appropriate exclusions for sensitive or unnecessary directories like.gitandnode_modules. - [SAFE]: All operations (file reading, validation, and archiving) are consistent with the skill's stated purpose of managing Agent Skill development workflows.
- [SAFE]: Dependencies are limited to
pyyaml, a well-known and standard library for YAML processing.
Audit Metadata