emilkowalski-skill

Warn

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: MEDIUMREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions to run npx skills add, which downloads and executes logic from the emilkowalski/skills GitHub repository. Fetching and running code from unverified community repositories presents a risk of executing untrusted scripts.
  • [EXTERNAL_DOWNLOADS]: The skill is designed to fetch external content and multiple sub-skills from https://github.com/emilkowalski/skills at runtime.
  • [COMMAND_EXECUTION]: The skill instructs the user or agent to execute shell commands to verify local file paths and install packages (e.g., using grep, echo, and npx). It also explicitly encourages the use of the ! shell execution syntax for these tasks.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 22, 2026, 09:34 PM