skill-creator
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides utility scripts for local development workflows. These scripts (init_skill.py, package_skill.py, and quick_validate.py) use standard Python modules such as pathlib, zipfile, and argparse to manage files and directories.
- [SAFE]: Data validation is performed using yaml.safe_load() in the validation script, preventing unsafe deserialization attacks.
- [SAFE]: User input for skill names is sanitized using regular expressions (re.sub(r'[^a-z0-9]+', '-', normalized)) to prevent directory traversal or invalid filename issues.
- [SAFE]: No network operations, remote downloads, or credential-accessing commands were detected in the instructions or the provided scripts.
Audit Metadata