callstack-agent-skills
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install external skill packages from
github.com/callstackincubator/agent-skills. Callstack is a well-known technology company and consultancy specializing in React Native, making this a trusted external source. - [COMMAND_EXECUTION]: The documentation includes shell commands for the agent to detect existing installations and execute the
npx skillsutility to install new packages. These commands are transparent, document standard package management behavior, and do not involve unauthorized privilege escalation or hidden execution.
Audit Metadata