curate-a-team-library

Pass

Audited by Gen Agent Trust Hub on Apr 3, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the npx ai-agent-skills command to perform administrative tasks. These commands are integral to the skill's functionality for library management. \n- [EXTERNAL_DOWNLOADS]: Fetches the ai-agent-skills package from the npm registry and imports external skill definitions via the CLI's add and catalog functions. \n- [PROMPT_INJECTION]: The skill includes a surface for indirect prompt injection as it processes and imports external skill data from upstream sources. \n
  • Ingestion points: search and add commands used to retrieve skills from remote repositories. \n
  • Boundary markers: None specified in the instructions. \n
  • Capability inventory: Shell execution via npx and local filesystem modifications. \n
  • Sanitization: Relies on the security controls of the underlying CLI tool and the host environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 3, 2026, 04:17 PM