find-skills

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use npx skills, which downloads and installs packages from external registries. It specifically references repositories from a well-known service provider (Vercel Labs).
  • [COMMAND_EXECUTION]: The workflow requires the agent to execute shell commands such as npx skills find and npx skills add to perform its primary function of skill management.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and displays search results from an external source (npx skills find). While this is the intended discovery mechanism, it represents a surface where external content (skill descriptions) could potentially influence the agent's presentation or subsequent actions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 11:05 AM