Skill Trust Index / detail

FrancyJGLisboa/agent-skill-creator/root

82
trusted analyzed 2h ago
WHY THIS SCORE

Claims

The skill is an autonomous 'factory' that creates cross-platform agent skills from various inputs (text, URLs, files, screenshots). It claims to be security-scanned, self-contained, and compatible with 17 platforms. It handles the entire lifecycle from raw material to production-ready skill.

Actual behavior

The provided `install.sh` script is a standard, POSIX-compliant installer. It detects global platform directories (e.g., `.claude`, `.copilot`) and creates symlinks (or copies) to the skill's directory. It supports `--dry-run` and `--uninstall` modes. The logic is transparent, using standard shell commands (`ln`, `rm`, `cp`, `readlink`) without complex network calls or external dependencies during installation.

Findings

medium secret_access — references credentials / private keys / secrets (legitimate for some tools; see behavior)
hardcoded API keys, .env files, injection pa

Attestation

signer 0xB62e1c338a83D3a6621f9127eEa5B000caCfCd01
digest 0x97e88aa667038824fa1b95663bbdb0d15dd688496e9c88b02bc746bdc057f8b1
verify: GET /skill/verify?digest=…&signature=… · scheme eip191-sha256

← Back to the index