skill-suggestion

Warn

Audited by Gen Agent Trust Hub on Jun 19, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill facilitates the installation of external logic by cloning Git repositories from GitHub and moving contents into the local skill directory (~/Documents/soul/skills/skills/).
  • [REMOTE_CODE_EXECUTION]: It executes a local shell script ~/Documents/soul/skills/scripts/install-local.sh to activate newly acquired code, creating a path for running external code in the agent's context.
  • [EXTERNAL_DOWNLOADS]: Downloads content from remote GitHub repositories using git clone. While it references trusted sources like Anthropic, it also suggests sources from community repositories and general GitHub code searches.
  • [COMMAND_EXECUTION]: Uses various CLI tools including just for catalog management, gh for searching GitHub code, and git for repository cloning.
  • [COMMAND_EXECUTION]: Interacts with a custom vendor tool bin/cue-learnings to record and query user interaction history for persistent behavior calibration.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 19, 2026, 11:49 PM
Security Audit — agent-trust-hub — skill-suggestion