search-first
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a structured methodology for research and decision-making, encouraging the use of existing, battle-tested solutions instead of implementing redundant code.- [EXTERNAL_DOWNLOADS]: The workflow references searching and adopting libraries from well-known services including npm, PyPI, and GitHub. These are standard developer resources.- [COMMAND_EXECUTION]: The instructions involve executing local search tools like
rg(ripgrep) to inspect existing code and package managers likenpmorpipto install dependencies. These operations are consistent with the skill's stated purpose of managing project dependencies.- [DATA_EXPOSURE_EXFILTRATION]: The skill suggests checking local configuration files such as~/.claude/settings.jsonto identify active MCP servers. This is a legitimate step for the agent to understand its available capabilities and avoid duplication.
Audit Metadata