skill-builder

Pass

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs validation of SKILL.md files using yaml.safe_load(), which is a secure practice to prevent arbitrary code execution during YAML parsing.
  • [SAFE]: The packaging script (package_skill.py) implements directory traversal using standard libraries to create ZIP archives, with appropriate exclusions for sensitive or unnecessary directories like .git and node_modules.
  • [SAFE]: All operations (file reading, validation, and archiving) are consistent with the skill's stated purpose of managing Agent Skill development workflows.
  • [SAFE]: Dependencies are limited to pyyaml, a well-known and standard library for YAML processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 1, 2026, 01:13 AM
Security Audit — agent-trust-hub — skill-builder