skills/shyxin/skills/skill-bundler/Gen Agent Trust Hub

skill-bundler

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The core logic in scripts/bundle_skills.py performs legitimate file system operations using standard Python libraries (os, zipfile, argparse). It packages skill directories into ZIP files while maintaining directory structure, which is consistent with its stated purpose.- [SAFE]: No network connectivity or external data transmission was detected. The script only reads from and writes to the local file system.- [SAFE]: The skill uses standard exclusion patterns to avoid bundling unnecessary metadata or sensitive temporary files (e.g., .git, node_modules, __pycache__).- [SAFE]: Platform configuration in SKILL.md and agents/openai.yaml restricts the skill to user-invoked execution, preventing autonomous model triggers.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 03:49 AM
Security Audit — agent-trust-hub — skill-bundler