skill-creator

zeroclaw-labs/zeroclaw/.claude/skills/skill-creatorOpen on GitHub
From the author

Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.

Compare
SkillApache-2.018 filesHas referencesHas scriptszeroclaw-labs/zeroclaw
Overall scoreOverall score FOverall score on A, B, C, F (there is no D).
Security severityCritical4 security findingsfrom 2 of 2 scanners

Static checks cannot guarantee safety.

Critical Shell command execution with string formatting (potential injection)

Open the leading finding →
Assessed Oct 28, 2026Content hashA Git tree SHA of the skill's folder. It identifies the files that were assessed. It is not a commit. 98a510dSource unchanged, checked Oct 28, 2026
Historical result (archived, not the current assessment)
Source badge at capture
Archived Fail as archived

Archived explanation: Skill has warnings: 1 warning in security or structure checks.

Pass and Fail now belong to Framework checks.

Scanners, signals and record facts
Assessed
Oct 28, 2026
Content hashA Git tree SHA of the skill's folder. It identifies the files that were assessed. It is not a commit.
98a510d
Next source check
Oct 29, 2026
Files
18 in the skill, 3 with findings (File structure)
Record ID
86631ca
Reliability & quality
Findings list
No quality findings
Static context tokens
Measured from SKILL.md
7,252 tokens in the SKILL.md body
Progressive disclosure: present
Cost
Measured
Not assessedVettd does not assess cost yet.
Compatibility
Captured declarations and checks
Name skill-creator
Environment needs : no valueNot declared by the author.
Additional captured checks (2)
  • CLI helppresent
  • Structured outputpresent
Popularity
Repository activity
★ 33.1k
Characteristics
Classified
Not assessedVettd does not assess characteristics yet.

Which scanners reported what

ScannerRunSecurity severity reportedSecurity findingsOther findingsNotes
vettdCompletedMedium100
ciscoCompletedCritical301

The overall score is F: 1 critical finding. It counts findings in every category. Security severity is Critical, the highest security finding across the scanners that ran (vettd reported medium; cisco reported critical). No captured run is recorded for snyk, socket and gen-trust-hub.

Security findings

Conflicting information. The author lists the license as Apache-2.0, but the cisco scanner reports that the skill manifest has no license field. Check the repository before you rely on either.

What this assessment does not cover

Static checks only, not a safety guarantee. What this does not cover
  • Static checks only. Nothing in the skill was run.
  • Pages linked from SKILL.md were not fetched or checked.
  • This record is not signed yet, so you can't verify it came from Vettd unchanged.
  • Name, description, author, version and license are shown as the author wrote them. Vettd didn't verify them.
  • Cost, runtime characteristics and usage are not assessed.
  • Framework checks (OWASP Top 10 for LLM Applications 2025): not assessed for this record.

What “Not assessed” means

skill-creator

zeroclaw-labs/zeroclaw/.claude/skills/skill-creator
From the author

Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.

Overall scoreOverall score FOverall score on A, B, C, F (there is no D).
Security severityCritical4 security findingsfrom 2 of 2 scanners

Static checks cannot guarantee safety.

Critical Shell command execution with string formatting (potential injection)

Open the leading finding →
Assessed Oct 28, 2026Content hashA Git tree SHA of the skill's folder. It identifies the files that were assessed. It is not a commit. 98a510dSource unchanged, checked Oct 28, 2026
Historical result (archived, not the current assessment)
Source badge at capture
Archived Fail as archived

Archived explanation: Skill has warnings: 1 warning in security or structure checks.

Pass and Fail now belong to Framework checks.

Compare
Full record · metadata, license, scanners and provenance
Assessed
Oct 28, 2026
Content hashA Git tree SHA of the skill's folder. It identifies the files that were assessed. It is not a commit.
98a510d
Next source check
Oct 29, 2026
Files
18 in the skill, 3 with findings (File structure)
Record ID
86631ca
SkillApache-2.018 filesHas referencesHas scriptszeroclaw-labs/zeroclaw
Security severity
Derived from findings
Critical
4 security findings
from 2 of 2 scanners
Reliability & quality
Findings list
No quality findings
Static context tokens
Measured from SKILL.md
7,252 tokens in the SKILL.md body
Progressive disclosure: present
Cost
Measured
Not assessedVettd does not assess cost yet.
Compatibility
Captured declarations and checks
Name skill-creator
Environment needs : no valueNot declared by the author.
Additional captured checks (2)
  • CLI helppresent
  • Structured outputpresent
Popularity
Repository activity
★ 33.1k
Characteristics
Classified
Not assessedVettd does not assess characteristics yet.
Cost and characteristics: not assessedVettd does not assess cost or runtime characteristics yet.Usage: not assessedVettd does not record how often a skill is used.

Which scanners reported what

The overall score is F: 1 critical finding. It counts findings in every category. Security severity is Critical, the highest security finding across the scanners that ran (vettd reported medium; cisco reported critical).

vettdMedium1 security finding
ciscoCritical3 security findings

Not covered

Static checks only. Linked pages not fetched. Record not signed yet. Author details not verified. Framework checks not assessed.