find-skills
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution: The skill interacts with the system using
npx skillscommands. This allows the agent to search for, install, and update modular packages. This is a common pattern for CLI-based utility skills. - External Package Installation: Through the
npx skills addcommand, the skill facilitates the download and installation of code from external repositories. This behavior is intended to allow users to extend the agent's functionality with specialized tools. - Registry Data Ingestion: The skill processes data retrieved from an external registry (skill names and descriptions). This creates a surface where the agent handles third-party content, which is a standard aspect of discovery-oriented tools.
- Global Installation Pattern: The use of the
-gflag in installation commands indicates that skills are installed at a user or system level, which is typical for persistent CLI tools.
Audit Metadata