skill-creator

Warn

Audited by Runlayer on Feb 22, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
3
Flagged
3
Chunks
6
Flagged Files (3)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md [1/3] Description: --- name: skill-creator description: "Guide for creating effective skills that extend agent capabilities with specialized knowledge, workflows, or tool integrations.

Tool: SKILL.md [2/3] Description: for typography - **Use cases**: Templates, images, icons, boilerplate code, fonts, sample documents that get copied or modified - **Benefits**: Separates output resources from documentation, enables the agent to use files without loading them into context #### What to Not Include in a Skill A skill should only contain essential files that directly support its functionality. Do NOT create extraneous documentation or auxiliary files, including: - README.md - INSTA

Tool: SKILL.md [3/3] Description: in the skill To establish the skill's contents, analyze each concrete example to create a list of the reusable resources to include: scripts, references, and assets. ### Step 3: Initializing the Skill At this point, it is time to actually create the skill.

scripts/init_skill.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/init_skill.py [1/2] Description: #!/usr/bin/env python3 """Skill Initializer - Creates a new skill from template. Usage: init_skill.py <skill-name> --path <path> Examples: init_skill.py my-new-skill --path skills/public init_skill.py my-api-helper --path skills/private init_skill.py custom-skill --path /custom/location For deepagents CLI: init_skill.py my-skill --path ~/.deepagents/agent/skills """ import sys from pathlib import Path MAX_SKILL_NAME_LENGTH = 64 SKILL_TEMPLATE = """-

Tool: scripts/init_skill.py [2/2] Description: or end with hyphen - No consecutive hyphens Unicode lowercase alphanumeric means any character where `c.isalpha() and c.islower()` or `c.isdigit()` returns `True`.

scripts/quick_validate.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/quick_validate.py Description: #!/usr/bin/env python3 """Quick validation script for skills - minimal version.

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
3
Files Flagged
3
Chunks Analyzed
6
Analyzed
Feb 22, 2026, 09:56 PM
Security Audit — runlayer — skill-creator