remove-ext-skill
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to delete skill-related directories and configuration files from the local file system.
- Evidence: The workflow explicitly instructs the use of
rm -rf skills/{name}/andrm -f commands/{name}.mdto remove extension components. - Context: The execution is restricted to the skill's own subdirectories. The instructions include 'MUST' rules requiring user confirmation via
AskUserQuestionbefore any deletion occurs. Additionally, the skill includes a hardcoded blacklist of 11 core skills (e.g., core, setup, help, add-ext-skill) that are strictly prohibited from being removed, preventing accidental or malicious system degradation.
Audit Metadata