find-skills
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
npxcommand to run theskillsCLI for searching (find), checking updates (check), and managing packages. - [REMOTE_CODE_EXECUTION]: The skill facilitates the installation of remote code from GitHub repositories using
npx skills add. It explicitly instructs the agent to use the-yflag, which bypasses interactive confirmation prompts during the installation process. However, it mitigates this by instructing the agent to verify source reputation and install counts first. - [EXTERNAL_DOWNLOADS]: The skill references
https://skills.sh/for browsing and uses the npm registry vianpxto fetch the management tool.
Audit Metadata