skill-creator
Fail
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: CRITICALCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Python scripts (init_skill.py, package_skill.py) that perform local file system operations such as directory creation, file writing, and creating zip archives. These tools are provided to automate the skill development lifecycle.
- [DYNAMIC_EXECUTION]: The init_skill.py script generates boilerplate templates for Python scripts and Markdown files. It sets executable permissions on the generated example script, which is a standard procedure for development initialization tools.
- [SAFE]: The automated security alert flagging SKILL.md as malware appears to be a false positive. A manual audit of the markdown content and the associated scripts shows no evidence of malicious behavior, obfuscation, or unauthorized data access. The content consists entirely of instructional material and standard developer utilities.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata