Skills
skills/postplusai/postplus-skills/skill-finder-cn/Gen Agent Trust Hub

skill-finder-cn

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to install the official PostPlus CLI tool using npm install -g @postplus/cli@latest. This is a standard installation procedure for the vendor's toolset.
  • [REMOTE_CODE_EXECUTION]: The skill and its included search script use npx to execute functionality directly from the vendor's public repository (PostPlusAI/postplus-skills). This is used to retrieve the catalog of available skills and perform installations.
  • [COMMAND_EXECUTION]: The scripts/search.sh script executes shell commands to list and filter available skills using npx and grep. These commands are scoped to searching the vendor's official skill repository.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 08:10 PM
Security Audit — agent-trust-hub — skill-finder-cn