skill-library

Pass

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads package catalogs and source files from the author's GitHub repository (github.com/Mathews-Tom/armory). It uses a fallback chain of git sparse-checkout, GitHub API calls, and direct curl requests to fetch content.
  • [COMMAND_EXECUTION]: To manage the lifecycle of packages, the skill executes several shell commands including git, curl, rsync, rm, and gh. These operations are focused on the ~/.claude/ directory and include safety measures such as user confirmation before file deletion.
  • [REMOTE_CODE_EXECUTION]: By design, the skill installs executable scripts and agent instructions into the local environment for future use. This behavior is consistent with its stated purpose as a package library and installer for the armory ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 12, 2026, 06:25 AM