worker-benchmarks
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation instructs the user to execute
npx agentic-flow, which triggers a download of theagentic-flowpackage from the public NPM registry. - [REMOTE_CODE_EXECUTION]: The use of
npxallows for the immediate execution of remote code. The source packageagentic-flowis not associated with a known trusted organization, posing a risk if the package is compromised. - [COMMAND_EXECUTION]: The skill provides several shell commands for the agent to perform benchmarking operations, including
npx agentic-flow workers benchmarkwith various sub-types such astrigger-detectionandagent-selection.
Audit Metadata