find-skills
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use
npx skills, which downloads and installs packages from external registries. It specifically references repositories from a well-known service provider (Vercel Labs). - [COMMAND_EXECUTION]: The workflow requires the agent to execute shell commands such as
npx skills findandnpx skills addto perform its primary function of skill management. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and displays search results from an external source (
npx skills find). While this is the intended discovery mechanism, it represents a surface where external content (skill descriptions) could potentially influence the agent's presentation or subsequent actions.
Audit Metadata