find-skills
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill reads local configuration files at
~/.claude/settings.jsonand plugin metadata in~/.claude/plugins/to identify currently installed plugins and marketplaces. This access is necessary for its functionality and restricted to specific search patterns. - [EXTERNAL_DOWNLOADS]: Fetches marketplace catalogs from the author's GitHub repository and Anthropic's official repository. These are used to provide the list of available plugins for recommendation.
- [COMMAND_EXECUTION]: Executes standard repository inspection commands (e.g.,
git log,find,grep) to understand the project's tech stack and purpose.
Audit Metadata