skillneed
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
npx skills add getedgehq/skills --listcommand to search for available skills. This operation is directed at the vendor's own catalog and is used for metadata discovery. - [EXTERNAL_DOWNLOADS]: The skill utilizes
npxandgit cloneto retrieve information from the GetEdge catalog and potentially inspect shortlisted skill repositories. These actions are scoped to the vendor's infrastructure or user-approved sources. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process data from external skill catalogs and repository files. It includes mandatory defensive instructions for the agent to treat all such discovered content as untrusted data, preventing it from influencing or overriding the agent's instructions.
Audit Metadata