skill-creator
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill includes Python scripts (
init_skill.pyandpackage_skill.py) that perform standard file system operations like directory creation and file writing to initialize and bundle skill packages. These actions are transparent and confined to the local environment.- [SAFE]: Metadata parsing inquick_validate.pycorrectly usesyaml.safe_load(), preventing potential code execution vulnerabilities from maliciously crafted YAML configurations.- [SAFE]: The generation of executable example scripts usingchmod 0o755ininit_skill.pyis an intended functionality for the development workflow and does not constitute unauthorized privilege escalation.- [SAFE]: No network activity, data exfiltration, or prompt injection patterns were detected. All components operate offline on local skill files.
Audit Metadata