installing-skill-files-in-ai-coding-agents
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides users to download agent extensions from a third-party GitHub repository (Leonxlnx/taste-skill). It mitigates risk by explicitly advising users to audit every file in third-party skills before deployment.
- [COMMAND_EXECUTION]: The instructions describe the use of the
npx skillsCLI tool for managing agent extensions. This is presented as a standard developer workflow for installing project-scoped configuration files.
Audit Metadata