find-skills
Warn
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill enables the discovery and download of third-party code packages from external repositories, including GitHub.
- [REMOTE_CODE_EXECUTION]: Instructions provide a mechanism to install and execute remote code via the
npx skills addcommand. The recommended commandnpx skills add <owner/repo@skill> -g -yuses the-yflag to bypass confirmation prompts, allowing the agent to install packages without manual user approval of the specific source. - [COMMAND_EXECUTION]: The skill relies on executing shell commands through the
npxpackage runner to manage and update the agent's capabilities.
Audit Metadata