skills/openai/codex/skill-creator/Gen Agent Trust Hub

skill-creator

Pass

Audited by Gen Agent Trust Hub on Mar 22, 2026

Risk Level: SAFE
Full Analysis
  • Standard Utility Scripts: The skill includes Python scripts (init_skill.py, generate_openai_yaml.py, and quick_validate.py) designed to assist developers in creating and maintaining skill folders. These scripts perform routine file and directory management tasks.
  • Input Sanitization: User-provided inputs, such as skill names, are sanitized using regular expressions (re.sub(r'[^a-z0-9]+', '-', normalized)) to prevent directory traversal or invalid file naming.
  • Safe Data Handling: The scripts utilize yaml.safe_load() for processing configuration files, which is a secure method that prevents the execution of arbitrary code during YAML deserialization.
  • Reassurance on Resource References: Documentation within the skill references official GitHub Copilot API endpoints as examples for tool configuration. These references target well-known services and are provided for educational context.
  • Secure YAML Generation: The metadata generation process includes manual escaping and quoting of string values to ensure that generated YAML files are valid and protected against injection of control characters.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 22, 2026, 07:18 PM