find-skills

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the npx command to run the skills CLI for searching (find), checking updates (check), and managing packages.
  • [REMOTE_CODE_EXECUTION]: The skill facilitates the installation of remote code from GitHub repositories using npx skills add. It explicitly instructs the agent to use the -y flag, which bypasses interactive confirmation prompts during the installation process. However, it mitigates this by instructing the agent to verify source reputation and install counts first.
  • [EXTERNAL_DOWNLOADS]: The skill references https://skills.sh/ for browsing and uses the npm registry via npx to fetch the management tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 04:22 AM
Security Audit — agent-trust-hub — find-skills