skill-creator
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes instructions to run provided Python scripts (
quick_validate.pyandpackage_skill.py) to automate skill validation and packaging. The scripts are transparent and perform standard local filesystem operations without elevated privileges. - [DYNAMIC_EXECUTION]: The validation script utilizes the
yaml.safe_load()method to parse skill metadata, effectively mitigating risks associated with unsafe YAML deserialization and preventing arbitrary code execution. - [SAFE]: No network access, sensitive data exposure, or obfuscation was detected. All external resources such as scripts are part of the skill's own package and perform legitimate, documented functions.
Audit Metadata