related-skill

Pass

Audited by Gen Agent Trust Hub on Mar 21, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx to execute the skills package. This involves downloading the package from the NPM registry at runtime to perform skill discovery and management tasks.
  • [COMMAND_EXECUTION]: The skill documentation provides instructions for using the npx skills command-line interface. The execution environment is restricted via frontmatter to only permit commands starting with npx skills, preventing arbitrary command execution.
  • [REMOTE_CODE_EXECUTION]: The npx skills add command installs additional agent skills from the inference-sh registry. This is the intended primary function of the skill and occurs within the provider's ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 21, 2026, 01:40 AM