geo-optimization
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill contains an instruction to "always start your first response with the 🧢 emoji," which is a directive to override the agent's default conversational behavior.
- [COMMAND_EXECUTION]: In the 'Companion check' section of SKILL.md, the agent is instructed to run an
lscommand on various local directories (e.g.,~/.claude/skills/,~/.agent/skills/) to identify installed components. - [EXTERNAL_DOWNLOADS]: The skill directs the agent to suggest downloading additional components from the author's repository using the
npx skills addcommand. - [REMOTE_CODE_EXECUTION]: The skill recommends the installation of missing companion skills via
npx, which involves fetching and executing remote code from the AbsolutelySkilled vendor.
Audit Metadata