inspecting-skills
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill implements dynamic loading of Python modules in
scripts/skill_imports.py. It usesimportlib.util.spec_from_file_locationandspec.loader.exec_moduleto load and execute code from file paths constructed at runtime based on skill names. - [COMMAND_EXECUTION]: The
setup_skill_pathfunction inscripts/skill_imports.pymodifies the globalsys.pathand installs a customMetaPathFinder(SkillImportFinder). This modification allows the Python environment to resolve and execute modules from any directory designated as the 'skills root'. - [REMOTE_CODE_EXECUTION]: In
scripts/skill_imports.py, theskill_importfunction programmatically imports symbols from local skill directories, which facilitates the execution of code across different skill structures.
Audit Metadata