rightcode-find-skills
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to interact with the system shell using the
npx skillscommand-line tool to search for, install, and manage packages. - [EXTERNAL_DOWNLOADS]: The functionality involves downloading external skill packages from remote repositories (such as GitHub) into the local environment via the
npx skills addcommand. - [REMOTE_CODE_EXECUTION]: By design, the skill allows for the installation and execution of remote code. To mitigate this risk, the instructions include explicit quality-check steps for the agent, such as verifying install counts, source reputation (e.g., official organizations), and GitHub star ratings before recommending or installing a package.
Audit Metadata