getting-started

Pass

Audited by Gen Agent Trust Hub on May 22, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides an installation command that fetches and executes a shell script from 'https://cli.skillsrouter.sh'. This domain is associated with the skill's author, and the pattern represents a standard installation procedure for the vendor's CLI tool.- [EXTERNAL_DOWNLOADS]: The skill uses 'npx skills add' to download and install additional capabilities from the 'skillsrouter/skills' repository. This repository is owned by the vendor and is part of the intended extension mechanism for the platform.- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run the 'sr' CLI commands. The 'allowed-tools' metadata correctly restricts tool usage to the 'sr' command pattern, which adheres to the principle of least privilege and prevents the execution of arbitrary system commands.
Audit Metadata
Risk Level
SAFE
Analyzed
May 22, 2026, 09:00 AM