skill-creator

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides developer utilities for managing skill project structures.
  • The init_skill.py script automates the creation of skill directories and template files using standard Python libraries.
  • The package_skill.py script bundles components into a zip-based distribution format.
  • The quick_validate.py script implements metadata checks using yaml.safe_load() to ensure secure data handling.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied names and configuration to generate boilerplate code and documentation.
  • Ingestion points: User-provided skill names and resource selections are ingested by scripts/init_skill.py.
  • Boundary markers: Input strings are sanitized through a normalization function that enforces a strict alphanumeric and hyphen character set.
  • Capability inventory: The scripts possess capabilities for file system creation, modification, and file compression via pathlib and zipfile.
  • Sanitization: Explicit regex-based normalization is applied to user input before it is used for path generation or template interpolation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 05:22 AM