find-skills

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill searches for and fetches external resources from the skills.sh platform and allows for downloading skill packages from GitHub repositories.
  • [COMMAND_EXECUTION]: Utilizes the npx skills CLI utility to interact with the agent's package management system for finding, checking, and updating skills.
  • [REMOTE_CODE_EXECUTION]: Provides instructions to install and integrate external code modules via the npx skills add command. To manage the risks associated with third-party code, the skill provides a multi-step verification process requiring the agent to evaluate the source reputation (noting well-known organizations like Vercel and Anthropic) and install metrics before execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 05:35 PM
Security Audit — agent-trust-hub — find-skills