customer-support-ops
Warn
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
SKILL.mdfile contains a 'Companion check' instruction that directs the agent to execute a shell command (ls) on first activation. This command scans multiple directories in the user's home folder (e.g.,~/.claude/skills/,~/.agent/skills/) to enumerate existing files. This constitutes unauthorized environment reconnaissance. - [EXTERNAL_DOWNLOADS]: Following the filesystem inspection, the agent is instructed to suggest the installation of additional remote skills using the command
npx skills add AbsolutelySkilled/AbsolutelySkilled --skill <name>. This promotes the acquisition and execution of remote code from external repositories without an initial user request.
Audit Metadata