skill-creator
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is a meta-utility designed for developers to build other agent extensions. Analysis of the SKILL.md and reference materials found no evidence of prompt injection, data exfiltration, or persistence mechanisms.\n- [COMMAND_EXECUTION]: The skill includes Python scripts (
scripts/init_skill.py,scripts/package_skill.py) that perform local file system operations like directory creation and ZIP archiving. These are standard CLI utilities for developers and do not interact with network resources or sensitive system files.\n- [SAFE]: The validation logic inscripts/quick_validate.pyusesyaml.safe_load(), which is a best practice to prevent code execution during YAML parsing.
Audit Metadata