skill-creator

Fail

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: CRITICAL
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes Python scripts (init_skill.py and package_skill.py) that perform local file system tasks such as creating directories, writing template files, and creating ZIP archives for distribution. These operations are essential for the skill's purpose as a developer tool.
  • [SAFE]: The automated malware alert for SKILL.md is evaluated as a false positive. A manual review of the file confirms it contains only text-based documentation and instructions with no executable code, obfuscation, or network requests.
  • [PRIVILEGE_ESCALATION]: The init_skill.py script sets executable permissions (755) on a newly generated example script. This is a standard and expected operation within the context of initializing a software project and does not represent a security risk.
Recommendations
  • CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Sep 14, 2026, 10:32 PM
Security Audit — agent-trust-hub — skill-creator