find-skills
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches and installs modular agent extensions from external repositories, including GitHub and the skills.sh registry, through the
npx skills addcommand. - [COMMAND_EXECUTION]: It utilizes shell commands to interface with the
skillsCLI for searching, installing, and managing the agent's set of available tools and workflows. - [REMOTE_CODE_EXECUTION]: It executes the
skillspackage from the NPM registry and installs remote skill packages that can introduce specialized logic and instructions into the agent's environment. The use of the-yflag in installation commands skips manual confirmation prompts for these remote resources.
Audit Metadata