setup-all
Warn
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs multiple Claude skills from an external GitHub repository (mattpocock/skills) using the 'gh skill install' command.
- [EXTERNAL_DOWNLOADS]: The skill performs a global installation of the '@fission-ai/openspec' package from the public NPM registry.
- [COMMAND_EXECUTION]: The skill executes the 'openspec' command-line tool to perform project initialization after installation.
- [REMOTE_CODE_EXECUTION]: The automated installation and enablement of external skills via GitHub represents the introduction and execution of remote code within the agent's operating environment.
Audit Metadata