find-skills
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
npx skillsCLI tool to search for and install packages. These commands are standard for the ecosystem's management. - [EXTERNAL_DOWNLOADS]: The skill facilitates downloading and installing instructions and code from external sources (GitHub, npm) via
npx skills add. References to trusted organizations such as Anthropic, Vercel, and Microsoft are documented neutrally as examples of reputable sources. - [SAFE]: The skill includes a clear warning about treating scraped content as untrusted data and explicitly advises against following instructions found within such content, mitigating indirect prompt injection risks.
- [SAFE]: The instructions guide the agent to verify the quality and reputation of sources (e.g., GitHub stars, install counts) before recommending or installing skills, which aligns with security best practices.
Audit Metadata