soia-meta-find-skill
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill identifies and presents installation commands (e.g.,
npx skills add ...) to the user. These commands are intended to be authorized by the user before the agent executes them to extend functionality. - [EXTERNAL_DOWNLOADS]: The skill references packages and repositories belonging to the 'soia-team' organization. These are vendor-owned resources used for installing additional ecosystem skills.
- [DATA_EXPOSURE]: The Python script scans the
~/.agents/skills/directory to read metadata fromSKILL.mdfiles. This access is limited to indexing installed skills and does not involve accessing sensitive user credentials or private files.
Audit Metadata