skill-creator

Pass

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill includes Python scripts (init_skill.py, package_skill.py) that perform project initialization and packaging tasks. These scripts use standard Python libraries for file system management and ZIP compression, following legitimate development patterns.
  • [SAFE]: Metadata validation in quick_validate.py uses yaml.safe_load(), which is a secure method for parsing YAML content that prevents the execution of arbitrary code through deserialization.
  • [SAFE]: No evidence of prompt injection, data exfiltration, or persistence mechanisms was found in the documentation or script templates.
  • [SAFE]: The skill does not perform any unauthorized network operations or access sensitive system files outside of the user-provided project directory.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 30, 2026, 12:55 AM
Security Audit — agent-trust-hub — skill-creator