find-skills
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the npx skills package manager to search for and install agent extensions. It directs the agent toward trusted repositories from established organizations like Vercel, Anthropic, and Microsoft.- [COMMAND_EXECUTION]: The skill uses shell-based commands (npx skills find and npx skills add) to manage the agent's environment. The use of the -y flag in the installation command is balanced by the instruction to verify skill quality first.- [SAFE]: The instructions include a dedicated quality verification step (Step 4) that acts as a manual security filter. It instructs the agent to check install counts and source reputation, explicitly warning against unknown authors or low-quality repositories.
Audit Metadata