skill-open-sourcer
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill's logic is transparent and focuses on automating a development workflow.
- [COMMAND_EXECUTION]: The skill uses local Python scripts (
check_release_env.pyandscan_skill_release.py) to verify the execution environment and audit target files. These scripts use subprocess calls to interact with standard development tools such asgit,node, andnpx. All commands are hardcoded or derived from the local environment and do not execute untrusted external input. - [DATA_EXFILTRATION]: While the skill facilitates the publication of data to GitHub, it is designed for user-initiated open-sourcing of their own skills. It includes a robust safety scanner that explicitly blocks the inclusion of API keys, tokens, private keys, and absolute system paths to prevent accidental data exposure.
Audit Metadata