find-package-skill

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [SAFE]: The skill describes a documentation discovery workflow designed to help agents find tribal knowledge in a monorepo's sdk/ directory. It uses standard file path logic to locate .github/skills/SKILL.md files.
  • [NO_CODE]: The skill consists entirely of natural language instructions and YAML metadata; no scripts or executable code are included.
  • [SAFE]: No sensitive file access, credential harvesting, or network-based exfiltration patterns were detected in the instructions.
  • [SAFE]: While the skill instructs the agent to ingest content from files within the repository (a potential surface for indirect prompt injection), this is the primary and intended purpose of the tool for organizational knowledge sharing, and it operates within a scoped directory (sdk/).
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 09:48 AM
Security Audit — agent-trust-hub — find-package-skill