padosoft-skill-creator
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
new_skill.pyscript performs local file system operations, including directory creation, template interpolation, and writing new files to theskills/directory. - [COMMAND_EXECUTION]: The scaffolding process uses
chmod 0o755to set executable permissions on generated Python scripts, which is a standard procedure for development tools. - [COMMAND_EXECUTION]: The skill instructions define a workflow requiring the execution of management commands such as
make catalogandpython3for repository maintenance and skill validation. - [SAFE]: The
check_provenance.pyscript is a security tool designed to identify and remove sensitive information (credentials, PII, internal paths) from skills before they are committed, following security best practices for public repositories.
Audit Metadata