skill-creator

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill functions as a meta-tool for skill development, providing clear documentation on structure and best practices without introducing executable risks.
  • [SAFE]: The script scripts/init_skill.py automates the creation of a skill directory and template files. It performs local file operations and sets appropriate file permissions (0o755) for its own generated scripts, which is standard behavior for development tools.
  • [SAFE]: The script scripts/quick_validate.py uses yaml.safe_load to parse skill frontmatter, which is a security best practice that prevents unsafe deserialization of untrusted data.
  • [SAFE]: The packaging logic in scripts/package_skill.py uses the standard zipfile library to bundle skill components into a .skill archive after validation, with no indicators of data exfiltration or unauthorized access.
  • [SAFE]: No network operations, remote code downloads, or attempts to access sensitive system files (e.g., SSH keys, credentials) were found across any of the included scripts or documentation files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 08:18 PM
Security Audit — agent-trust-hub — skill-creator