simota-agent-skills
Warn
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill body and metadata point to an external repository at
https://github.com/simota/agent-skillsas the source for its functionality, bypassing the local skill boundaries.- [REMOTE_CODE_EXECUTION]: The instructions mandate the use ofnpx skills add simota/agent-skills, which downloads and runs external scripts from the simota repository to perform the installation.- [COMMAND_EXECUTION]: The documentation encourages the user to send! npx skills add ...as a chat message, leveraging the dynamic context injection syntax to execute arbitrary shell commands within the host environment.
Audit Metadata