skill-suggestor

Pass

Audited by Gen Agent Trust Hub on Mar 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses npx skills ls --json to retrieve a list of currently installed skills for comparison against recommendations.
  • [EXTERNAL_DOWNLOADS]: Connects to the AbsolutelySkilled/AbsolutelySkilled repository to download and install new skills as requested by the user.
  • [REMOTE_CODE_EXECUTION]: Utilizes the npx tool to execute installation routines for skills acquired from the registry. This is the core functionality of the skill and is triggered only with user consent.
  • [SAFE]: Includes robust anti-spam and safety principles, specifically requiring user confirmation before running any installation commands and limiting recommendations to an established registry.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 15, 2026, 03:40 PM
Security Audit — agent-trust-hub — skill-suggestor