new-project
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install external skills using the
npx skills addcommand from various remote sources, including third-party repositories. - Evidence:
npx skills add https://github.com/leonxlnx/taste-skill --skill design-taste-frontendinSKILL.md. - Evidence:
npx skills add https://github.com/addyosmani/web-quality-skills --skill performanceinSKILL.md. - [EXTERNAL_DOWNLOADS]: The skill references and downloads configurations from official and well-known service repositories.
- Evidence:
npx skills add https://github.com/vercel-labs/agent-skills --skill vercel-react-best-practicesinSKILL.md. - Evidence:
cloudflare security: https://github.com/cloudflare/security-audit-skillinSKILL.md. - [EXTERNAL_DOWNLOADS]: The skill fetches setup instructions and additional skills from the vendor's official domain and GitHub repositories.
- Evidence:
Stream getstream.io/SKILL.mdinSKILL.md. - Evidence:
npx skills add https://github.com/GetStream/universal-skills/inSKILL.md.
Audit Metadata