skill-distiller
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several local Python scripts located in
distillery/scripts/to perform search, fetching, validation, and token counting (e.g.,distiller.py search,distiller.py fetch,distiller.py validate). - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
skills.shvia thedistiller.pyscript to find and fetch skill metadata. It also usesnpx skills addto download skill content from external repositories. - [COMMAND_EXECUTION]: The skill provides a fallback mechanism that executes
npx skills adddirectly from the shell if the scripted fetch process fails. - [COMMAND_EXECUTION]: The skill uses
python3 distillery/scripts/distiller.py grok-querywhich appears to be a tool for querying external social platforms (referred to as 'X posts') for supplementary context during the synthesis phase.
Audit Metadata