commit-and-git
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch an updated configuration file from the author's repository on GitHub (philtzjp/skills) if the replacement skill is not found locally.
- [COMMAND_EXECUTION]: The skill provides a shell command (
pnpm dlx skills add ...) to install the updated skill suite. The instructions explicitly state that the agent must obtain user consent before executing this installation command.
Audit Metadata