mastepanoski-skills
Warn
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill functions as a placeholder that requires downloading external code from a third-party GitHub repository (
https://github.com/mastepanoski/claude-skills) that is not associated with the provided author context or a trusted organization. - [COMMAND_EXECUTION]: The documentation provides instructions to execute shell commands (
npx skills add) to install and run code from the npm registry and GitHub. - [COMMAND_EXECUTION]: The skill suggests using the
!commandsyntax (! npx skills add ...) within instructions. In certain agent environments like Claude Code, this syntax can trigger immediate shell execution when the message is processed, bypassing standard user confirmation steps for command execution.
Audit Metadata