assimovt-productskills

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill functions as a package catalogue that initiates the download of 16 specialized product management sub-skills from a remote repository.
  • Evidence: The skill instructions point to https://github.com/assimovt/productskills as the source for the full package.
  • [REMOTE_CODE_EXECUTION]: The installation instructions require the agent to run the npx skills add command.
  • Evidence: This command executes the skills package from the NPM registry, which then downloads and integrates remote logic/instructions into the agent's environment.
  • [COMMAND_EXECUTION]: The skill provides shell commands for the agent to probe its local environment to determine the installation status and scope.
  • Evidence: Shell scripts check for the existence of files in ~/.agents/skills/ and use grep to verify the presence of specific configuration markers.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 05:01 AM