setup-falcondev-oss-skills
Warn
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill runs a local shell script
install.shto automate the installation and configuration tasks. - [EXTERNAL_DOWNLOADS]: The
install.shscript uses package managers (pnpm, yarn, bun, npm) to download theskillsCLI from a public registry. - [REMOTE_CODE_EXECUTION]: The script executes the fetched
skillsCLI to install skill packages from various GitHub repositories, including third-party sources such asdietrichgebert/ponytailandmattpocock/skills. - [COMMAND_EXECUTION]: The skill modifies persistent agent configuration files (e.g.,
~/.claude/CLAUDE.md,~/.gemini/GEMINI.md, and~/.codex/AGENTS.md) to inject global instructions that affect all future agent behavior.
Audit Metadata