find-skills
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill mentions downloading and installing packages via the
npx skillscommand. However, it provides clear guidance on prioritizing trusted organizations (e.g., Anthropic, Vercel Labs) and well-known services (GitHub, npm) for these downloads, which aligns with standard package management practices. - [COMMAND_EXECUTION]: The skill uses the
npx skillsCLI for searching (find) and installing (add) skills. These commands are the intended purpose of the package manager tool and are documented with safety checks (e.g., verifying install counts and source reputation before recommending). - [SAFE]: The skill references established, well-known domains such as
skills.shand official GitHub repositories from trusted organizations. These references are used for informational purposes and to guide the user to legitimate tools.
Audit Metadata