ask-kit

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides the user with an explicit shell command (npx skills add devarfeen/agent-skills-kit -g --skill <name>) to be manually executed if a required skill is missing. This is a documentation/instructional feature and is not automatically executed by the agent, especially as disable-model-invocation: true is set in the frontmatter.
  • [EXTERNAL_DOWNLOADS]: The suggested npx command references the author's (devarfeen) package on the NPM registry. This represents a standard installation process for the vendor's own toolkit and is considered safe within the context of the skill's intended purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 08:56 PM