find-skills
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Invokes the
npx skillscommand-line utility to perform package management operations. - Evidence: Skill instructions include commands for
find,add,check, andupdatewithin the skills ecosystem. - [EXTERNAL_DOWNLOADS]: Fetches and installs agent skills from external repositories.
- Evidence: Directs the agent to download configurations and tools from GitHub repositories, specifically referencing official sources such as
vercel-labs/agent-skills. - [REMOTE_CODE_EXECUTION]: Automates the installation of external code or instructions into the agent's runtime environment.
- Evidence: Instructs the agent to use
npx skills add <package> -g -y, where the-yflag suppresses user confirmation during the integration of remote packages.
Audit Metadata