skillex-skill-registry
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation describes the sync-skills.py utility which clones the skill registry from the vendor's repository (https://github.com/delorenj/skillex.git) when no local checkout is present.\n- [DYNAMIC_EXECUTION]: The provision-packs.py script is documented as using Python's importlib to dynamically load resolver logic from the sync-skills.py file.\n- [COMMAND_EXECUTION]: The skill instructions include command surface examples for executing local management tools such as uv, python3, and node to audit manifests and provision skill packs.\n- [INDIRECT_PROMPT_INJECTION]: The skill manages projections based on external manifest files.\n
- Ingestion points: .agents/skills.json (references/manifest.md).\n
- Boundary markers: JSON schema validation and safe path component enforcement.\n
- Capability inventory: Git cloning, symlink creation, and pack rendering (references/fanout.md).\n
- Sanitization: Lexical path normalization and O_NOFOLLOW file descriptor checks.
Audit Metadata