find-skills
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
npx skillsCLI to search for (find), install (add), and update (update) agent extensions. These commands are executed locally to manage the agent's environment. - [EXTERNAL_DOWNLOADS]: The skill downloads and installs modular packages from the open agent skills ecosystem, primarily via GitHub repositories. Documentation neutrally notes that it references trusted sources such as Vercel Labs for these extensions.
- [SAFE]: No malicious patterns such as prompt injection, data exfiltration, or obfuscation were detected. The functionality aligns with the stated purpose of managing agent capabilities via a standard package manager interface.
Audit Metadata