find-skills
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Executes the
npx skillsCLI to perform search, update, and installation tasks. - [EXTERNAL_DOWNLOADS]: Fetches and installs skill packages from external repositories, primarily GitHub.
- [REMOTE_CODE_EXECUTION]: Facilitates the installation of external code packages. The instructions include usage of the
-yflag to automate installation by skipping manual confirmation prompts. - [SAFE]: Implements security best practices by instructing the agent to validate the trustworthiness of external sources (citing established organizations like Vercel, Anthropics, and Microsoft) and use quantitative metrics like install counts and GitHub stars to mitigate the risk of malicious third-party content.
Audit Metadata