getting-started
Pass
Audited by Gen Agent Trust Hub on May 22, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides an installation command that fetches and executes a shell script from 'https://cli.skillsrouter.sh'. This domain is associated with the skill's author, and the pattern represents a standard installation procedure for the vendor's CLI tool.- [EXTERNAL_DOWNLOADS]: The skill uses 'npx skills add' to download and install additional capabilities from the 'skillsrouter/skills' repository. This repository is owned by the vendor and is part of the intended extension mechanism for the platform.- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run the 'sr' CLI commands. The 'allowed-tools' metadata correctly restricts tool usage to the 'sr' command pattern, which adheres to the principle of least privilege and prevents the execution of arbitrary system commands.
Audit Metadata