skill-creator
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides automated tools for local development. Scripts utilize
yaml.safe_load()to prevent unsafe deserialization vulnerabilities when reading configuration files. - [SAFE]: Implements input validation and normalization for skill names and file paths, protecting against directory traversal and ensuring files are created in intended locations.
- [COMMAND_EXECUTION]: Provides scripts (
init_skill.py,generate_openai_yaml.py,quick_validate.py) for the agent to execute. These scripts are limited to local file system management (creating directories, writing templates) and do not perform network operations or access sensitive system files.
Audit Metadata