find-skills
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
bashtool to executenpx skillscommands for searching, adding, and updating agent skills. - [EXTERNAL_DOWNLOADS]: Fetches skill metadata and package information from the registry at
https://skills.sh/usingWebFetchorWebSearch. - [REMOTE_CODE_EXECUTION]: The skill facilitates the installation of third-party code via
npx skills add. This primary functionality is secured by a multi-phase workflow that mandates source reputation checks and requires explicit user consent before execution, preventing unauthorized or silent code installation.
Audit Metadata