find-skills

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: Invokes the npx skills command-line utility to perform package management operations.
  • Evidence: Skill instructions include commands for find, add, check, and update within the skills ecosystem.
  • [EXTERNAL_DOWNLOADS]: Fetches and installs agent skills from external repositories.
  • Evidence: Directs the agent to download configurations and tools from GitHub repositories, specifically referencing official sources such as vercel-labs/agent-skills.
  • [REMOTE_CODE_EXECUTION]: Automates the installation of external code or instructions into the agent's runtime environment.
  • Evidence: Instructs the agent to use npx skills add <package> -g -y, where the -y flag suppresses user confirmation during the integration of remote packages.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 03:29 AM