internet-skill-finder
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/fetch_skills.pyusessubprocess.runto call thegh(GitHub CLI) tool for authenticated API access. This is a standard and safe way to interact with GitHub platform services when the tool is present. - [EXTERNAL_DOWNLOADS]: The skill fetches metadata and directory listings from specific, well-known GitHub repositories (such as
anthropics/skills,vercel-labs/agent-skills, andgoogle-geminirelated lists) to provide its search functionality. These operations are limited to retrieving information about other skills and do not involve executing untrusted code.
Audit Metadata