skill-creator
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Python
subprocessmodule in several files (scripts/run_eval.py,scripts/improve_description.py, andeval-viewer/generate_review.py) to execute shell commands. These include running the officialclaudeCLI tool to test skill triggering, as well as usinglsofandkillto manage the local HTTP server used for the evaluation viewer. These are legitimate uses of command execution required for the skill's meta-development features.\n- [EXTERNAL_DOWNLOADS]: The evaluation viewer template (eval-viewer/viewer.html) references an external JavaScript library, SheetJS, hosted oncdn.sheetjs.com. This library is used to provide spreadsheet rendering capabilities within the skill's reporting interface and is a well-known service in the technology industry.
Audit Metadata