find-skills
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFENO_CODEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [NO_CODE]: The skill consists exclusively of Markdown documentation files (SKILL.md and reference guides) and does not contain any executable scripts, binaries, or configuration files that would run code directly.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for using the 'skills' utility from the npm registry via 'npx'. This package is maintained by Vercel Labs, an established technology organization.
- [COMMAND_EXECUTION]: The documentation details the use of CLI commands to manage agent skills on the local filesystem, including installing skills into agent-specific directories like '.claude/skills/'.
- [EXTERNAL_DOWNLOADS]: The 'add' command described in the documentation allows for the installation of skills from external Git repositories. The skill provides a 'Security Review' section that proactively instructs the agent and user to verify sources, review instruction files, and check for suspicious scripts before installation.
Audit Metadata