skill-best-practices
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a local Python script (
scripts/validate-metadata.py) to validate user-supplied metadata fields (name and description). The command is used for formatting and style validation and does not interact with sensitive system resources or perform network operations. - [SAFE]: All file paths and script references are local and relative. No external downloads, remote code execution, or data exfiltration behaviors were detected.
- [SAFE]: The Python script uses
sys.stderrandsys.exitappropriately to provide feedback to the agent, which is a best practice for deterministic skill behavior.
Audit Metadata