assimovt-productskills
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill functions as a package catalogue that initiates the download of 16 specialized product management sub-skills from a remote repository.
- Evidence: The skill instructions point to
https://github.com/assimovt/productskillsas the source for the full package. - [REMOTE_CODE_EXECUTION]: The installation instructions require the agent to run the
npx skills addcommand. - Evidence: This command executes the
skillspackage from the NPM registry, which then downloads and integrates remote logic/instructions into the agent's environment. - [COMMAND_EXECUTION]: The skill provides shell commands for the agent to probe its local environment to determine the installation status and scope.
- Evidence: Shell scripts check for the existence of files in
~/.agents/skills/and usegrepto verify the presence of specific configuration markers.
Audit Metadata