skill-library
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads package catalogs and source files from the author's GitHub repository (
github.com/Mathews-Tom/armory). It uses a fallback chain of git sparse-checkout, GitHub API calls, and direct curl requests to fetch content. - [COMMAND_EXECUTION]: To manage the lifecycle of packages, the skill executes several shell commands including
git,curl,rsync,rm, andgh. These operations are focused on the~/.claude/directory and include safety measures such as user confirmation before file deletion. - [REMOTE_CODE_EXECUTION]: By design, the skill installs executable scripts and agent instructions into the local environment for future use. This behavior is consistent with its stated purpose as a package library and installer for the armory ecosystem.
Audit Metadata