addyosmani-quality

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [NO_CODE]: The skill does not contain any executable scripts, binaries, or active automation logic. It functions as documentation and an installation guide for external tools.
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to install external packages from a well-known source (GitHub) using the npx skills command. The target repository belongs to a recognized developer in the web performance community.
  • [COMMAND_EXECUTION]: The skill provides standard installation commands for the user to run. There are no hidden or automated background commands detected.
  • [DYNAMIC_CONTEXT_INJECTION]: The skill mentions using the ! prefix in Claude Code to send commands, but it does so as a legitimate user instruction for installation purposes rather than as an automated injection vector.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 01:40 PM