affirmations

Warn

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADS

Full Analysis

[EXTERNAL_DOWNLOADS]: The skill documentation includes a command block suggesting the installation of an external skill package via npx skills add inference-sh/skills@prompt-engineering. The source inference-sh is not included in the trusted vendors list, representing an unverified third-party dependency. The use of npx involves the download and potential execution of remote code to perform the installation.

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 8, 2026, 10:25 AM