skillkit

Pass

Audited by Gen Agent Trust Hub on Mar 25, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were detected. The toolkit includes security-focused utilities such as security_scanner.py and validate_skill.py that scan for hardcoded secrets, injection risks, and dangerous patterns in other skills. Educational references to dangerous functions like eval() and exec() in the security guide are correctly documented as risks to be avoided.
  • [COMMAND_EXECUTION]: The provided automation scripts (init_skill.py, test_generator.py, migration_helper.py, etc.) perform legitimate file management and template generation tasks essential to the skill's purpose. They follow security best practices by using safe libraries such as yaml.safe_load.
  • [EXTERNAL_DOWNLOADS]: The skill uses established tools like web_search for domain research and references well-known package registries for its configuration, which is standard for a development utility and consistent with its intended primary use case.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 25, 2026, 04:09 PM
Security Audit — agent-trust-hub — skillkit