find-package-skill
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill describes a documentation discovery workflow designed to help agents find tribal knowledge in a monorepo's
sdk/directory. It uses standard file path logic to locate.github/skills/SKILL.mdfiles. - [NO_CODE]: The skill consists entirely of natural language instructions and YAML metadata; no scripts or executable code are included.
- [SAFE]: No sensitive file access, credential harvesting, or network-based exfiltration patterns were detected in the instructions.
- [SAFE]: While the skill instructs the agent to ingest content from files within the repository (a potential surface for indirect prompt injection), this is the primary and intended purpose of the tool for organizational knowledge sharing, and it operates within a scoped directory (
sdk/).
Audit Metadata