skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFE
Full Analysis
- Standard Utility Scripts: The skill includes Python scripts (
init_skill.py,generate_openai_yaml.py, andquick_validate.py) designed to assist developers in creating and maintaining skill folders. These scripts perform routine file and directory management tasks. - Input Sanitization: User-provided inputs, such as skill names, are sanitized using regular expressions (
re.sub(r'[^a-z0-9]+', '-', normalized)) to prevent directory traversal or invalid file naming. - Safe Data Handling: The scripts utilize
yaml.safe_load()for processing configuration files, which is a secure method that prevents the execution of arbitrary code during YAML deserialization. - Reassurance on Resource References: Documentation within the skill references official GitHub Copilot API endpoints as examples for tool configuration. These references target well-known services and are provided for educational context.
- Secure YAML Generation: The metadata generation process includes manual escaping and quoting of string values to ensure that generated YAML files are valid and protected against injection of control characters.
Audit Metadata