skill-creator

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill includes Python scripts (init_skill.py and package_skill.py) that perform standard file system operations like directory creation and file writing to initialize and bundle skill packages. These actions are transparent and confined to the local environment.- [SAFE]: Metadata parsing in quick_validate.py correctly uses yaml.safe_load(), preventing potential code execution vulnerabilities from maliciously crafted YAML configurations.- [SAFE]: The generation of executable example scripts using chmod 0o755 in init_skill.py is an intended functionality for the development workflow and does not constitute unauthorized privilege escalation.- [SAFE]: No network activity, data exfiltration, or prompt injection patterns were detected. All components operate offline on local skill files.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 04:31 PM