skill-creator
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structural templates and automation for creating new agent capabilities.
- [SAFE]: The included scripts (
init_skill.pyandvalidate_skill.py) perform local file system operations and structural validation without external network access or sensitive data exposure. - [SAFE]: Input normalization in the
init_skill.pyscript prevents directory traversal and shell injection risks by restricting the character set of skill names. - [SAFE]: The
validate_skill.pyscript utilizesyaml.safe_load()(with a basic fallback) for processing metadata, which protects against unsafe deserialization vulnerabilities. - [SAFE]: The documentation promotes security hygiene by instructing agents to implement mandatory wallet policies before attempting any on-chain or financial operations.
Audit Metadata