find-skills
The skill forces insecure package installations by mandating global flags and auto-confirmation, while executing unpinned npx commands that expose the agent to arbitrary code execution from untrusted sources.
Skill Info
Install
npx skills add https://github.com/vercel-labs/skillsAssessments (4)
AI Agent Traps ↗The skill encourages the use of the '-g' (global) and '-y' (auto-confirm) flags when installing packages. This bypasses user security prompts and installs potentially untrusted code with elevated permissions, which is a significant security risk.
Step 6: 'npx skills add <owner/repo@skill> -g -y' (The -y flag skips confirmation prompts, and -g installs globally).
The skill frames the 'skills.sh' ecosystem as a trusted source, potentially conditioning the agent to bypass standard security scrutiny when recommending or installing packages from that platform. [ensemble: confirmed by 2/3 passes; severity set to the agreed median (ADR-0067).]
The Skills CLI (npx skills) is the package manager for the open agent skills ecosystem.
The instructions explicitly direct the agent to use the '-y' flag during installation, which bypasses user confirmation prompts and prevents the human from reviewing the package being installed.
npx skills add <owner/repo@skill> -g -y
The instructions explicitly direct the agent to use the '-y' flag during installation, which bypasses user confirmation prompts for potentially arbitrary code execution. [ensemble: confirmed by 3/3 passes; severity set to the agreed median (ADR-0067).]
npx skills add <owner/repo@skill> -g -y
NER model detected organization in skill content (confidence: 0.68)
G*****
Unpinned npx package execution — `npx <pkg>` without a version pin pulls latest from npm at runtime — 11 occurrences in this skill; showing the first 10 (aggregate, 1 suppressed to bound noise)
Unpinned npx package execution — `npx <pkg>` without a version pin pulls latest from npm at runtime (seen 10 times in this file at lines 27, 28, 29, 56, 61, 62, 63, 90, 100, 131)
npx skills
Skill does not specify a license field. Specifying a license helps users understand usage terms.
Version History (5)
Badge
[](https://mondoo.com/ai-agent-security/skills/github/vercel-labs/skills/find-skills)<a href="https://mondoo.com/ai-agent-security/skills/github/vercel-labs/skills/find-skills"><img src="https://mondoo.com/ai-agent-security/api/badge/github/vercel-labs/skills/find-skills.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/github/vercel-labs/skills/find-skills.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet, discover and control Shadow AI usage.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow