digidai-pm
Warn
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is designed to download and install external content from a remote repository (
Digidai/product-manager-skills) using thenpx skills addcommand. The content of this upstream repository is not part of the current analysis package. - [COMMAND_EXECUTION]: The skill provides specific shell commands for environment detection and installation, including directory checks (
[ -e ~/.agents/skills/digidai-pm ]) and package execution vianpx. - [DYNAMIC_CONTEXT_INJECTION]: The documentation explicitly instructs the user or agent to use the
!shell execution prefix (specific to platforms like Claude Code) to run installation commands directly within the conversation context.
Audit Metadata