Secure Skill Installer FAQs

Question 1

Does this skill support private GitHub repositories?

Accepted Answer

The skill currently uses the WebFetch tool for public repositories; access to private repositories depends on your environment's existing GitHub authentication and tool permissions.

Question 2

How does the security scan protect my system?

Accepted Answer

The skill performs a thorough analysis of all code files, checking for 7 critical risk categories including malicious command execution, backdoor patterns, credential theft (like accessing SSH or AWS keys), and unauthorized network requests.

Question 3

Can I install skills from a specific branch?

Accepted Answer

Yes, the installer supports standard GitHub URL formats including specific branches (e.g., /tree/branch-name/skills), allowing you to test experimental features safely.

Question 4

Where are the skills installed on my machine?

Accepted Answer

Approved skills are automatically written to the ~/.claude/skills/ directory, maintaining their original folder structure and file permissions.

Question 5

What happens if a security risk is detected?

Accepted Answer

If a skill is marked as DANGEROUS, the installation is blocked. If it contains minor risks, it is flagged with a WARNING, and the user must explicitly approve the installation after reviewing the detailed findings.

Secure Skill Installer

Key Features

Use Cases

Secure Skill Installer

Key Features

Use Cases