skill-manager

Pass

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess commands and dynamic execution to manage its components and interact with the system environment. File scripts/git_ops.py executes git commands to track changes in skill directories. File scripts/install.py executes git clone and git sparse-checkout to download skills from remote repositories. File scripts/skills utilizes exec() to load utility functions and runs Python code snippets via subprocess.run to handle search and installation logic.
  • [EXTERNAL_DOWNLOADS]: The skill fetches data and code from remote sources to perform its management tasks. File scripts/install.py downloads repository archives and clones Git repositories from GitHub. File scripts/profile.py communicates with the GitHub Gist API to handle profile exports and imports.
  • [REMOTE_CODE_EXECUTION]: The core functionality involves installing and enabling third-party AI skills which contain executable instructions or scripts. File scripts/install.py facilitates downloading SKILL.md files and associated scripts from user-provided GitHub URLs, which are then integrated into the active agent environment.
  • [DATA_EXFILTRATION]: The skill can aggregate and send configuration metadata to external services for synchronization. File scripts/profile.py can export a list of installed skill names and their sources to a GitHub Gist if a user provides a GITHUB_TOKEN environment variable.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 9, 2026, 10:07 AM