skill-finder
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to perform local searches using the
greputility on thereferences/official-skills.mdfile to match user requirements against known skills.\n- [EXTERNAL_DOWNLOADS]: The skill suggests a fallback tonpx skills find, which involves downloading and executing theskillspackage from the npm registry. This package is managed by Vercel Labs, a well-known and established organization.\n- [PROMPT_INJECTION]: The skill reads from an extensive local reference file (references/official-skills.md) containing descriptions and metadata from over 1184+ community and official sources. This presents a potential surface for indirect prompt injection if the source data contains adversarial instructions meant to influence the agent's behavior during processing.\n - Ingestion points:
references/official-skills.mdprocessed via grep and read by the agent.\n - Boundary markers: None present to distinguish between search text and instructions.\n
- Capability inventory: Local file reading,
grepexecution, andnpxpackage execution.\n - Sanitization: No explicit sanitization or filtering of the content within the reference file before processing.
Audit Metadata