skill-creator
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides developer utilities for managing skill project structures.
- The
init_skill.pyscript automates the creation of skill directories and template files using standard Python libraries. - The
package_skill.pyscript bundles components into a zip-based distribution format. - The
quick_validate.pyscript implements metadata checks usingyaml.safe_load()to ensure secure data handling. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied names and configuration to generate boilerplate code and documentation.
- Ingestion points: User-provided skill names and resource selections are ingested by
scripts/init_skill.py. - Boundary markers: Input strings are sanitized through a normalization function that enforces a strict alphanumeric and hyphen character set.
- Capability inventory: The scripts possess capabilities for file system creation, modification, and file compression via
pathlibandzipfile. - Sanitization: Explicit regex-based normalization is applied to user input before it is used for path generation or template interpolation.
Audit Metadata