skill-creator-openai
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate framework for skill development, providing templates and automation tools for local environment use.
- [COMMAND_EXECUTION]: The skill includes local Python scripts (
init_skill.py,package_skill.py,quick_validate.py) intended for task automation. These scripts perform routine file system operations such as directory creation, template writing, and zipping files based on user-provided CLI arguments. No malicious execution patterns or unsafe command interpolations were detected. - [DATA_EXFILTRATION]: No evidence of network operations, hardcoded credentials, or sensitive file access (e.g., SSH keys, cloud configs) was found. The skill operates entirely within the local project context.
- [REMOTE_CODE_EXECUTION]: There are no instances of remote script downloads, piped execution (curl|bash), or dynamic execution of untrusted code. The included scripts utilize standard Python libraries and follow safe practices, such as using
yaml.safe_loadfor parsing configuration files.
Audit Metadata