user-stories
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to perform a local directory listing using
lson specific hidden paths (e.g.,~/.claude/skills/) to detect which companion skills are currently installed. - [EXTERNAL_DOWNLOADS]: The documentation and instructions suggest the use of
npx skills addto fetch and install additional recommended skills from the vendor's repository.
Audit Metadata