eng-find-skills
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
npx skillsCLI tool for searching, adding, and updating agent capabilities. It includes instructions for unattended installation using the-yflag when requested by the user. - [EXTERNAL_DOWNLOADS]: Fetches configuration and executable skill packages from official repositories belonging to trusted organizations like Vercel Labs and the well-known discovery service at
skills.sh. - [PROMPT_INJECTION]: No attempts to bypass safety filters, override system instructions, or extract system prompts were detected in the instructions.
- [DATA_EXFILTRATION]: No access to sensitive files, environment variables, or credentials was observed. Network activity is strictly limited to the package manager's intended discovery and installation functions.
Audit Metadata