Is anygen-shared safe to install?

SaferSkills independently audited anygen-shared (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

skills/anygen-shared/SKILL.md · 1 file

skills/anygen-shared/SKILL.md1.6 KB · Markdown

name: anygen-shared

version: 1.0.0

description: "anygen CLI: Shared patterns for authentication, global flags, and output formatting."

metadata:

requires:

bins: ["anygen"]

env: ["ANYGEN_API_KEY"]

install:

- id: node

kind: node

package: "@anygen/cli"

bins: ["anygen"]

anygen — Shared Reference

Authentication

# Web login (recommended for agent usage)
anygen auth login --no-wait

# Direct API key (no browser needed)
anygen auth login --api-key sk-xxx

# Environment variable
export ANYGEN_API_KEY=sk-xxx

CLI Syntax

anygen <resource> <method> [flags]

Method Flags

Flag	Description
`--params '<json>'`	URL/path parameters
`--data '<json>'`	Request body
`--dry-run`	Show the request without sending it
`--wait`	Re-poll until terminal state
`--timeout <ms>`	Polling timeout in milliseconds

Discovering Commands

# Browse all resources and methods
anygen --help
anygen task --help

# Inspect a method's required params, types, and defaults
anygen schema task.create
anygen schema task.message.send

Use anygen schema output to build your --params and --data flags.

Security Rules

Never output API keys or auth tokens directly.
Always confirm with user before uploading files or creating tasks.
Never upload or read any file without explicit user consent.
Use natural language instead of exposing task_id, file_token, or CLI syntax to the user.
Always return links using Markdown format: [text](url).

anygen-shared— agent skill

Is anygen-shared safe to install?

anygen — Shared Reference

Authentication

CLI Syntax

Method Flags

Discovering Commands

Security Rules

Audit the pieces. Scan the whole. Decide.