skill-ecosystem-sync
Warn
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs various high-impact system operations using shell commands, including repository management (git clone, git pull, git push), file synchronization (rsync), and the creation of symbolic links (ln -s) to manage skill profiles.
- [EXTERNAL_DOWNLOADS]: The skill fetches content from several external sources. While many sources belong to well-known organizations (e.g., Flutter, Vercel, Upstash), the skill also facilitates downloads from third-party repositories such as coreyhaines31/marketingskills.
- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to install and update skills globally from external sources using the command 'npx skills add ... -g -y --skill '*' '. This behavior automatically downloads and potentially executes code from third-party repositories without per-skill review, posing a supply chain risk.
- [DATA_EXFILTRATION]: The skill includes a bidirectional sync that pushes local skill improvements to the author's public GitHub repository (jahfaliabdulrahman-dev/hermes-skills). While this is the intended purpose, it involves sending local data to an external service. Notably, the skill includes a specific security gate (a grep-based path scan) to prevent the accidental upload of personal system paths.
Audit Metadata