skills-admin

Pass

Audited by Gen Agent Trust Hub on Apr 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: Utilizes git and the GitHub CLI (gh) within workflows/open-pr.md to manage repository forks, branches, and pull requests. These operations are conducted within the user's local environment for administrative tasks.
  • [EXTERNAL_DOWNLOADS]: In workflows/update-skill.md, the skill fetches metadata from the vendor's official GitHub repository (raw.githubusercontent.com/promptingcompany/agent-skills) using curl to verify version info.
  • [REMOTE_CODE_EXECUTION]: Uses npx skills add and git clone in workflows/update-skill.md to download and install updates from the vendor's repository. This behavior is the primary intended function of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 20, 2026, 02:15 PM