skillkit
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Executes the vendor-provided
@crafter/skillkitCLI tool using thebunxrunner to perform system-level analytics and skill management. - [COMMAND_EXECUTION]: Provides functionality to delete files (skills) from the local filesystem through the
prunecommand, intended for cleaning up unused resources. - [EXTERNAL_DOWNLOADS]: Fetches the
@crafter/skillkitpackage from a remote registry to facilitate execution viabunxor global installation. - [REMOTE_CODE_EXECUTION]: The skill relies on running an external CLI package (
@crafter/skillkit) which is downloaded and executed at runtime. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of session logs and traces from other agents, which could potentially contain malicious instructions.
- Ingestion points: The
skillkit scancommand reads and indexes session data and JSONL/JSON traces from various local agent directories. - Boundary markers: None documented; the skill assumes the integrity of the parsed session logs.
- Capability inventory: The skill possesses file deletion capabilities (
skillkit prune) and filesystem read access across multiple agent environments. - Sanitization: The documentation does not specify sanitization procedures for the indexed session data.
Audit Metadata