skills/snyk/agent-scan/skill-creator/Gen Agent Trust Hub

skill-creator

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a development framework and documentation for creating other skills. Its behavior is consistent with its stated purpose.
  • [COMMAND_EXECUTION]: The provided Python utility scripts (init_skill.py, package_skill.py) perform standard file system operations, including creating directories, writing template files, and zipping content. These actions are restricted to the local development environment and are necessary for the skill's functionality.
  • [DYNAMIC_EXECUTION]: Template generation in init_skill.py uses standard string formatting to populate boilerplate content for new skills. No use of unsafe functions like eval() or exec() on external or user-provided data was identified.
  • [OBFUSCATION]: No hidden content, encoded strings, or homoglyph-based attacks were detected in the instructions or the source code.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a creation tool that ingests user preferences to generate new skill templates. It employs structured validation in quick_validate.py (using yaml.safe_load) to ensure metadata adheres to specific schemas and naming conventions, reducing the risk of accidental schema confusion.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 09:19 PM