gomtm-init-devlopment
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install a third-party skill set using the command
npx -y skills@latest add mattpocock/skills --global --yes. This fetches code from the npm registry and a remote repository. - [REMOTE_CODE_EXECUTION]: The use of
npx -y skills@latestinvolves the immediate execution of a remote package from the npm registry. The command includes the--yesand-yflags, which automate the download and execution of the package by suppressing user confirmation prompts.
Audit Metadata