skill-creator
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and synchronizes itself from the official Anthropic GitHub repository as documented in the README.md.
- [COMMAND_EXECUTION]: Several Python scripts (
scripts/run_eval.py,eval-viewer/generate_review.py) usesubprocess.Popenandsubprocess.runto execute system commands such asclaude -pfor running evaluations orlsoffor managing server ports. These are standard operational requirements for the skill's purpose. - [SAFE]: The code follows best practices for secret management by instructing users to use
.envfiles for keys rather than hardcoding them. It also uses safe YAML loading viayaml.safe_loadinscripts/quick_validate.py.
Audit Metadata