skill-creator
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a development framework and documentation for creating other skills. Its behavior is consistent with its stated purpose.
- [COMMAND_EXECUTION]: The provided Python utility scripts (
init_skill.py,package_skill.py) perform standard file system operations, including creating directories, writing template files, and zipping content. These actions are restricted to the local development environment and are necessary for the skill's functionality. - [DYNAMIC_EXECUTION]: Template generation in
init_skill.pyuses standard string formatting to populate boilerplate content for new skills. No use of unsafe functions likeeval()orexec()on external or user-provided data was identified. - [OBFUSCATION]: No hidden content, encoded strings, or homoglyph-based attacks were detected in the instructions or the source code.
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a creation tool that ingests user preferences to generate new skill templates. It employs structured validation in
quick_validate.py(usingyaml.safe_load) to ensure metadata adheres to specific schemas and naming conventions, reducing the risk of accidental schema confusion.
Audit Metadata