skills/gsfsss/makerskills/skillify/Gen Agent Trust Hub

skillify

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches skill definitions and repository metadata from external sources including GitHub and agentskills.io as part of its primary function to adapt external skills.
  • [COMMAND_EXECUTION]: Utilizes common developer utilities including git clone, gh api, grep, yq, and the Edit tool to manage skill repositories, verify licenses, and perform cross-skill updates.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external instructions during its 'ADAPT' mode, representing an ingestion point for untrusted data. This is mitigated by mandatory manual review steps described in SKILL.md and references/adapt-buckets.md, which require the user to approve all keeping, adapting, or adding of content. 1. Ingestion points: External GitHub URLs, agentskills.io, and pasted content (SKILL.md). 2. Boundary markers: Usage of references/attribution.md and source markers (SKILL.md). 3. Capability inventory: git, gh, grep, yq, and the Edit tool. 4. Sanitization: Manual three-bucket classification and license checks (references/adapt-buckets.md, references/adapt-license-check.md).
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 12:37 AM