related-skill
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the discovery and installation of additional capabilities via
npx skills. It references packages frominference-shandbelt-shregistries, which are established services within this ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill functions as a registry/directory, recommending external code for installation which could influence the agent's capabilities.
- Ingestion points: Static lists of recommended skills located in
SKILL.md. - Boundary markers: N/A (Static content).
- Capability inventory: Usage of
npx skillsfor installation and listing, which is scoped by theallowed-toolsconfiguration to prevent arbitrary shell access. - Sanitization: N/A.
Audit Metadata