find-skills

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the npx skills package manager to search for and install agent extensions. It directs the agent toward trusted repositories from established organizations like Vercel, Anthropic, and Microsoft.- [COMMAND_EXECUTION]: The skill uses shell-based commands (npx skills find and npx skills add) to manage the agent's environment. The use of the -y flag in the installation command is balanced by the instruction to verify skill quality first.- [SAFE]: The instructions include a dedicated quality verification step (Step 4) that acts as a manual security filter. It instructs the agent to check install counts and source reputation, explicitly warning against unknown authors or low-quality repositories.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 09:33 AM
Security Audit — agent-trust-hub — find-skills