sequential-thinking
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill dynamically downloads and executes the
@modelcontextprotocol/server-sequential-thinkingpackage from the official npm registry vianpx. This is a well-known service and the standard implementation for this protocol. - [COMMAND_EXECUTION]: The script spawns a subprocess using
npxto run the sequential-thinking server. This operation is the primary intended function of the skill to provide the underlying logic for problem-solving. - [DATA_EXPOSURE]: Documentation in
SKILL.mdcontains hardcoded absolute paths specific to the author's local machine (C:\Users\lyf1143312445). This reveals local file structure information about the author but does not negatively impact the security of the end-user environment.
Audit Metadata