inspecting-skills

Pass

Audited by Gen Agent Trust Hub on Feb 27, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill implements dynamic loading of Python modules in scripts/skill_imports.py. It uses importlib.util.spec_from_file_location and spec.loader.exec_module to load and execute code from file paths constructed at runtime based on skill names.
  • [COMMAND_EXECUTION]: The setup_skill_path function in scripts/skill_imports.py modifies the global sys.path and installs a custom MetaPathFinder (SkillImportFinder). This modification allows the Python environment to resolve and execute modules from any directory designated as the 'skills root'.
  • [REMOTE_CODE_EXECUTION]: In scripts/skill_imports.py, the skill_import function programmatically imports symbols from local skill directories, which facilitates the execution of code across different skill structures.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 27, 2026, 09:31 PM