autosync-ic-skills
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads a shell script and subsequent skill files from
https://skills.internetcomputer.org. This is the official domain for Internet Computer (IC) resources and is considered a trusted vendor source for this skill. - [COMMAND_EXECUTION]: The skill instructs the agent to create directories, check for prerequisites like
jq, and modify.claude/settings.json. These are standard configuration tasks for setting up a development environment. - [REMOTE_CODE_EXECUTION]: The skill establishes a
SessionStarthook that executesbash .claude/sync-ic-skills.shat the beginning of every session. While this executes local code that was previously downloaded, the instructions explicitly state that Claude Code will prompt the user to review and trust the hook before it activates, ensuring user oversight. The script itself performs differential updates by comparing hashes to minimize network activity.
Audit Metadata