k-skill-setup
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill manages a local configuration environment by creating the
~/.config/k-skill/directory and managing asecrets.envfile with restricted permissions (0600) to protect sensitive API keys.\n- [EXTERNAL_DOWNLOADS]: It utilizesnpxto manage the installation and checking of theskillsNode.js package, which is the standard mechanism for this ecosystem.\n- [COMMAND_EXECUTION]: The skill offers optional persistence by configuringcrontab(macOS/Linux) orschtasks(Windows) to automate update checks, with instructions explicitly stating this requires prior user consent.\n- [COMMAND_EXECUTION]: It includes a social interaction feature to star a GitHub repository using theghCLI tool, which is only executed upon explicit user agreement.
Audit Metadata