stitch-skill-creator
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Python script (
scripts/init_stitch_skill.py) designed to automate the creation of new skill folders and file templates. This script uses regular expression validation to strictly constrain the naming of new skills, effectively preventing path traversal attacks through malicious input. - [SAFE]: The skill's operations, including file creation and script execution, are entirely local and consistent with its documented purpose. It adheres to a 'Design First' principle, instructing created skills to return prompts rather than executing code, which minimizes the overall risk surface.
Audit Metadata