molten-skill-manage
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
npx skillscommand to manage the installation and lifecycle of agent skills, including adding, updating, and removing packages. - [REMOTE_CODE_EXECUTION]: The agent is instructed to execute
npx skills, which fetches and runs code from the NPM registry. It also installs skills directly from GitHub repositories using theaddcommand, allowing for remote code to be incorporated into the agent's environment. - [EXTERNAL_DOWNLOADS]: The skill downloads code and configuration from the NPM registry and GitHub repositories (e.g.,
switch-dimension/molten-os-core). These operations target well-known services and resources associated with the skill's author. - [PERSISTENCE]: The management of skills involves installing and removing code that persists in the agent's project or global environment, allowing the agent to maintain new capabilities across different sessions.
Audit Metadata