lazyweb-design
Fail
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The instructions direct the user to run 'curl -fsSL https://www.lazyweb.com/install.sh | bash'. Piping remote scripts directly to a shell is a critical security risk as it allows for immediate execution of unverified code.
- [EXTERNAL_DOWNLOADS]: The skill attempts to download a setup script from 'https://www.lazyweb.com/install.sh'.
- [COMMAND_EXECUTION]: The skill explicitly commands the use of shell utilities ('curl', 'bash') to perform installation tasks and suggests running 'lazyweb_health' afterwards.
Recommendations
- HIGH: Downloads and executes remote code from: https://www.lazyweb.com/install.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata