rc-find-skills

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the npx skills command-line interface to perform searches, verify updates, and manage the installation of external capabilities.
  • [EXTERNAL_DOWNLOADS]: It interacts with external resources such as the skills.sh leaderboard and GitHub repositories to fetch skill metadata and packages.
  • [REMOTE_CODE_EXECUTION]: The skill enables the installation of external code packages using npx skills add. This behavior is the primary intended function of the skill and is accompanied by rigorous human-in-the-loop and automated verification instructions, such as checking for official vendors (e.g., Vercel Labs, Anthropics) and minimum install/star counts to mitigate the risk of malicious package installation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 04:57 AM
Security Audit — agent-trust-hub — rc-find-skills