geo-optimization
Warn
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The SKILL.md file contains a 'Companion check' instruction that directs the AI agent to run shell commands (
ls) to inspect multiple hidden directories in the user's home folder, such as~/.claude/skills/,~/.agent/skills/, and~/.agents/skills/. This behavior constitutes environment reconnaissance, gathering information about the user's installed tools and local configuration without a clear functional necessity. - [EXTERNAL_DOWNLOADS]: The skill promotes the execution of code from an unverified third-party repository (
AbsolutelySkilled/AbsolutelySkilled) via thenpxcommand. Downloading and running remote code from untrusted sources introduces supply-chain security risks, as the code is not from a recognized trusted vendor or the verified author's official namespace.
Audit Metadata