skill-linter
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a shell script located at
scripts/validate-skill.shwhich performs validation logic. The script employs standard Unix utilities such asgrep,sed,awk, andwcto analyze file content. Analysis of the script confirms that it uses robust variable quoting for path and content variables, effectively mitigating command injection risks. - [SAFE]: No network operations, such as
curlorwget, are present in the script or instructions, ensuring that the tool operates strictly within the local environment. - [SAFE]: The skill does not access sensitive system directories, environment variables, or credential stores. Its file system access is scoped to the target skill directory provided by the user.
- [SAFE]: The content of the skill is transparent, with no evidence of obfuscation (e.g., Base64, hidden characters) or attempts to override agent safety protocols. The metadata and author information are consistent with the tool's functionality as a quality assurance linter.
Audit Metadata