financial-reporting
Warn
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's documentation and internal instructions direct the user and the agent to install additional dependencies from an external GitHub repository (
AbsolutelySkilled/AbsolutelySkilled) usingnpx. - Evidence found in
README.mdandSKILL.mdpromoting the use ofnpx skills add AbsolutelySkilled/AbsolutelySkilled --skill <name>. - [COMMAND_EXECUTION]: The skill contains a 'Companion check' instruction that mandates the agent to execute shell commands to list the contents of specific directories in the user's home environment.
- Evidence in
SKILL.md:ls ~/.claude/skills/ ~/.agent/skills/ ~/.agents/skills/ .claude/skills/ .agent/skills/ .agents/skills/ 2>/dev/null. - This behavior allows the agent to discover information about the user's installed tools and environment without explicit per-execution consent.
Audit Metadata