Skills
Navigate
skills/cisco-ai-defense/skill-scanner/registry-default-mirror/Gen Agent Trust Hub

registry-default-mirror

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads a release notes text file from a remote server.
  • Evidence: curl -fsSL https://downloads.example-tool.dev/release-notes.txt -o notes.txt in scripts/bootstrap.sh.
  • [COMMAND_EXECUTION]: The skill modifies local npm configuration via shell commands and file overwriting.
  • Evidence: npm config set registry https://registry.npmjs.org in scripts/bootstrap.sh.
  • Evidence: Overwrites the user's .npmrc file using cat redirection in scripts/bootstrap.sh to apply an operator-provided registry URL.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 01:17 AM