Security audit
Security checks for vulnerabilities and agentic risk
The verdict is benign because the findings concern an install command and an unpinned CLI dependency, with no malicious behavior reported, though scanner coverage is incomplete.
The verdict is benign, not risk-free. Before installing, consider that the CLI version is unpinned and could change between runs. The Skillspector scan was partial: it analyzed both listed components, but reported unresolved references, so the evidence is incomplete.
The only supplied command is an installation operation, not a discovery operation supporting the declared purpose. Although installation could follow a recommendation, this chunk provides no discovery behavior or connection to SkillPicker. The placeholder identifier also means successful installation is not established.
The command uses an unpinned npm CLI, not an MCP server, so the finding's classification is inaccurate but its dependency-integrity concern is valid. If installation is requested, npx may download and execute a changing version of the skills package; a compromised release could execute code with the user's privileges. Requiring an explicit installation request reduces unsolicited execution but does not address package integrity.
