Confirm the source
Compare the repository, publisher, and installation command before continuing.
✓
Third-party audit
PassedGen Agent Trust Hub
devboxes · namespacelabs/agent-skills
Provider summary
The skill manages remote development environments (devboxes) via the Namespace CLI. It includes automated installation of the CLI from vendor-controlled domains and allows for the execution of arbitrary scripts on remote machines. The skill also facilitates forwarding GitHub credentials to these remote instances to enable private repository access. A low-risk finding for indirect prompt injection is noted as the skill processes external repository content within a powerful remote execution environment.
The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.
- Provider
- Gen Agent Trust Hub
- Normalized result
- pass
- Risk level
- NONE
- Audited
- Sep 22, 2026
How to use this signal
Read the content
Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.
Limit permissions
Use the narrowest possible scope and avoid broad credentials for third-party skills.