agentic-awesome-skills-installer
Warn
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to run
npx agentic-awesome-skills. This command downloads and executes code from the npm registry at runtime. - [EXTERNAL_DOWNLOADS]: The skill fetches a library of over 1,900 files from a non-trusted GitHub repository (https://github.com/sickn33/agentic-awesome-skills).
- [COMMAND_EXECUTION]: The skill provides multiple shell commands and programmatic examples (Python and Node.js) that invoke system processes to install, update, and manage the external skill library.
Audit Metadata