sgc-skill-distiller
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/collect-source-evidence.pyscript executesgitcommands viasubprocess.runto gather project history as evidence. This is a legitimate function for the skill's purpose of experience distillation. - [COMMAND_EXECUTION]: The
SKILL.mdworkflow includes a step to run the evidence collection script, which is expected behavior for this tool. - [SAFE]: The
scripts/validate_skill.pyscript performs linting and validation on skill metadata, links, and file hygiene. It includes standard Python practices like SemVer validation and YAML parsing. - [SAFE]: External references in
SKILL.mdpoint to local markdown files (references/distillation-lens.md,references/skill-blueprint.md), posing no external risk.
Audit Metadata