Skills
skills/skills-il/skills-il-cli/find-skills/Gen Agent Trust Hub

find-skills

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the vendor's own CLI tool, skills-il, to search for and manage packages via npx commands.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download and installation of remote packages through the npx skills-il add command. It provides explicit instructions for the agent to verify the quality and reputation of these external sources (e.g., checking GitHub stars and install counts) and highlights established organizations like Vercel and Anthropic as examples of trusted sources.
  • [PROMPT_INJECTION]: The skill processes untrusted search results from the CLI; however, it incorporates specific instructions for the agent to evaluate the safety and reputation of those results (Step 4) before presenting them to the user or performing an installation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 12:18 PM
Security Audit — agent-trust-hub — find-skills