agent-skill-management
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the use of npx skills, which fetches and executes the skills package from the npm registry. This package is maintained by Vercel Labs (associated with the vercel-labs/skills repository), a trusted organization.
- [COMMAND_EXECUTION]: The skill defines command-line operations for managing and verifying skills, including using the skills CLI for installation and running a local Node.js script check-installed-copies.mjs for consistency checks.
- [SAFE]: The utility script scripts/check-installed-copies.mjs performs benign file system comparisons using standard Node.js libraries to ensure integrity between source and installed skill files. It contains no network access or dangerous execution patterns.
Audit Metadata