padosoft-skill-creator

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The new_skill.py script performs local file system operations, including directory creation, template interpolation, and writing new files to the skills/ directory.
  • [COMMAND_EXECUTION]: The scaffolding process uses chmod 0o755 to set executable permissions on generated Python scripts, which is a standard procedure for development tools.
  • [COMMAND_EXECUTION]: The skill instructions define a workflow requiring the execution of management commands such as make catalog and python3 for repository maintenance and skill validation.
  • [SAFE]: The check_provenance.py script is a security tool designed to identify and remove sensitive information (credentials, PII, internal paths) from skills before they are committed, following security best practices for public repositories.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 06:48 PM
Security Audit — agent-trust-hub — padosoft-skill-creator