install-bensz-skills

Pass

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches skill content from GitHub repositories. The default sources are limited to the author's own repositories (huangwb8) and trusted organizations such as Anthropic (anthropics).
  • [COMMAND_EXECUTION]: Utilizes subprocess.run to call Git for cloning remote repositories as part of the remote installation process. These operations are essential to the skill's primary function and target well-known or author-controlled sources.
  • [SAFE]: The skill performs legitimate file management tasks within the user's home directory (~/.codex/skills and ~/.claude/skills). It includes MD5-based version control to avoid redundant installations and offers a preview mode (dry-run) to show intended actions without modifying files.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 9, 2026, 07:28 AM