internet-skill-finder

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/fetch_skills.py uses subprocess.run to call the gh (GitHub CLI) tool for authenticated API access. This is a standard and safe way to interact with GitHub platform services when the tool is present.
  • [EXTERNAL_DOWNLOADS]: The skill fetches metadata and directory listings from specific, well-known GitHub repositories (such as anthropics/skills, vercel-labs/agent-skills, and google-gemini related lists) to provide its search functionality. These operations are limited to retrieving information about other skills and do not involve executing untrusted code.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 07:23 AM
Security Audit — agent-trust-hub — internet-skill-finder