skills
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents how to download agent skills from various sources including GitHub repositories (
owner/repo), direct URLs, and archive files (.zip,.tar.gz). - [REMOTE_CODE_EXECUTION]: It instructs the user to use
npxto execute theskillsCLI package directly from the npm registry. - [COMMAND_EXECUTION]: The tool performs file system operations such as symlinking or copying
SKILL.mdfiles into agent-specific configuration directories (e.g.,~/.claude/skills/or.agents/skills/). - [SAFE]: The tool and its associated repositories are maintained by a well-known organization, and the documented practices for handling credentials and environment variables align with standard development security protocols.
Audit Metadata