find-skills-sh
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill integrates with the skills.sh ecosystem to download and install external agent extensions.- [COMMAND_EXECUTION]: Utilizes npx skills commands to perform searches, installations, and updates of modular agent packages.- [REMOTE_CODE_EXECUTION]: Facilitates the installation of remote code through the npx skills add command. The instructions mitigate potential risks by requiring the agent to verify skill metrics such as install count and author reputation (referencing trusted organizations like Vercel and Anthropic) prior to recommendation.- [PROMPT_INJECTION]: The skill processes external search results from the npx skills find command. While this represents an attack surface for instructions embedded in package metadata, the skill mandates specific verification steps to check install counts and source reputation before the agent acts on the data.
Audit Metadata