Skills
Navigate
skills/gabriel-lafrance/skills/setup-gabriel-skills/Gen Agent Trust Hub

setup-gabriel-skills

Warn

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill utilizes npx to download and execute the skills package from the npm registry. It is configured to perform automated installations using flags such as --all and -y, which bypasses manual confirmation steps.
  • [COMMAND_EXECUTION]: The skill executes shell commands to inspect and verify the filesystem, targeting user-level directories such as ~/.claude, ~/.cursor, and ~/.agents to identify existing installations.
  • [EXTERNAL_DOWNLOADS]: The skill fetches the AGENTS.md configuration file from the author's public GitHub repository at https://raw.githubusercontent.com/Gabriel-Lafrance/Skills/main/AGENTS.md.
  • [PRIVILEGE_ESCALATION]: The skill modifies critical AI agent instruction files including CLAUDE.md, GEMINI.md, and AGENTS.md, and updates global configuration files like .aider.conf.yml at both the repository and user-home levels.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 2, 2026, 03:07 PM