cnife-skills-repo
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill documents and provides scripts for repository maintenance, including executing
rufffor code formatting and a Python script for validating YAML metadata across multiple files. These are standard automation tasks for repository management. - [EXTERNAL_DOWNLOADS]: The publishing workflow includes the use of
bunx skills add, which fetches skills from the author's (CNife) own GitHub repository. This is an expected operation for the vendor's own infrastructure. - [COMMAND_EXECUTION]: The skill utilizes a sub-agent delegation mechanism (
delegate_task) with access to file and terminal tools to perform automated audits. The provided examples show this is used for legitimate tasks such as checking PEP 723 headers and ruff compliance.
Audit Metadata