skill-creator
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
claudeCLI and system utilities (such aslsoffor port management) via subprocesses. These calls are used to run test cases, capture timing data, and manage the local evaluation viewer. - [EXTERNAL_DOWNLOADS]: The evaluation viewer UI (
eval-viewer/viewer.html) loads the SheetJS library from a well-known CDN (cdn.sheetjs.com) to provide spreadsheet rendering capabilities for test outputs. - [DATA_EXPOSURE]: The skill creates a local workspace to store evaluation results, transcripts, and grading data. It facilitates human review via a local HTTP server bound to
127.0.0.1, ensuring that sensitive evaluation data remains on the local machine. - [DYNAMIC_EXECUTION]: During the evaluation and optimization phases, the skill dynamically generates temporary skill definition files in the project's command directory to test triggering logic and behavior under different conditions.
Audit Metadata