skill-installer
skill-installer is a Skill discovery & installation skill for AI agents, published by yipng05-max in the -skills repository on GitHub. Skillspace rates skill-installer F (15/100) and the safety scan rated it unsafe; the rating is based on static analysis only.
Unsafe. This skill has patterns associated with malicious or dangerous behaviour. We do not recommend running it.
Skill 安装工具(Skill Installer)。从多种来源安装 Claude Code skill, 内置安全审查流程,安装前自动执行 skill-vetter 协议。 支持:GitHub 仓库路径(owner/repo/skill-name)、原始文件 URL、 本地文件路径、直接粘贴 SKILL.md 内容。 当用户说"安装这个skill""install skill""帮我装这个""从GitHub安装skill" "把这个skill装上""安装 owner/repo/skill-name"时触发此 skill。 注意:所有安装在写入文件前必须经过安全审查,无法获取内容的来源一律拒绝安装。
- Grade
- F
- Quality
- 15 / 100
- Safety
- Unsafe
- GitHub stars
- 247
Unproven: rated by static analysis only, not yet compared head-to-head.
This rating describes the version of the repository we crawled; it may have changed since.
Our review
- Architecture
- 80 / 100
- Maturity
- Basic: a single SKILL.md
- Security scan
- Critical-risk patterns
- License
- MIT
- Adoption
- Adopted by 0 other repositories, in 0 collections
What the scanner flagged
- destructive rm -rf on home/root
- accesses sensitive system files
- dynamic code execution (eval/exec)
Not checked yet
- Category is a classifier prediction; no model has read this skill yet
- Not judged on the rubric yet (not a contender in its category)
- No blind task eval yet
- Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.