skills-admin
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Utilizes
gitand the GitHub CLI (gh) withinworkflows/open-pr.mdto manage repository forks, branches, and pull requests. These operations are conducted within the user's local environment for administrative tasks. - [EXTERNAL_DOWNLOADS]: In
workflows/update-skill.md, the skill fetches metadata from the vendor's official GitHub repository (raw.githubusercontent.com/promptingcompany/agent-skills) usingcurlto verify version info. - [REMOTE_CODE_EXECUTION]: Uses
npx skills addandgit cloneinworkflows/update-skill.mdto download and install updates from the vendor's repository. This behavior is the primary intended function of the skill.
Audit Metadata