skills/getedgehq/skills/skillneed/Gen Agent Trust Hub

skillneed

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the npx skills add getedgehq/skills --list command to search for available skills. This operation is directed at the vendor's own catalog and is used for metadata discovery.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes npx and git clone to retrieve information from the GetEdge catalog and potentially inspect shortlisted skill repositories. These actions are scoped to the vendor's infrastructure or user-approved sources.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process data from external skill catalogs and repository files. It includes mandatory defensive instructions for the agent to treat all such discovered content as untrusted data, preventing it from influencing or overriding the agent's instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 08:43 PM