install-skill
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads repository tarballs from GitHub (
codeload.github.com) using thebin/install-skill-packtool. This is a core function of the skill and includes a mandatory security scan (scripts/skill-scan.sh) to evaluate untrusted content. - [COMMAND_EXECUTION]: Executes several local management scripts including
bin/install-skill-pack,bin/generate-skills-json, andbin/generate-packs-json. These are internal tools used for repository maintenance and skill lifecycle management. - [DATA_EXPOSURE]: The skill specifically warns against following instructions found inside fetched packs and treats all downloaded content as untrusted data. It enforces a security gate that blocks high-severity findings unless a
--forceflag is explicitly provided by the operator. - [SAFE]: The skill implements several best practices for safety, such as enforcing branch-based workflows (
git checkout -b), performing dry runs before execution, and ensuring all new skills land withenabled: falseto prevent immediate execution of unreviewed code.
Audit Metadata