cli-hub-meta-skill
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a dynamic list of available tools from a remote catalog hosted at https://hkuds.github.io/CLI-Anything/SKILL.txt.
- [REMOTE_CODE_EXECUTION]: The instructions guide the agent to perform package installations directly from the HKUDS organization repository on GitHub via pip install.
- [PROMPT_INJECTION]: The skill processes untrusted metadata from an external source, creating a surface for indirect instructions. Ingestion points: The catalog file at hkuds.github.io. Boundary markers: None identified. Capability inventory: The skill enables package installation and command-line execution. Sanitization: No validation or filtering of the remote content is specified.
Audit Metadata