lazyweb-growth-backlog
Fail
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to execute a script downloaded directly from a remote server using
curl -fsSL https://www.lazyweb.com/install.sh | bash. This pattern is highly dangerous as it grants the remote script full control over the agent's environment without local verification or auditing. - [COMMAND_EXECUTION]: The instructions command the agent to 'open it once in the host browser without printing, sharing, or logging it' when encountering an
open_url. This is a concealment technique designed to bypass user oversight and logging mechanisms, potentially allowing the agent to visit malicious or phishing sites silently. - [EXTERNAL_DOWNLOADS]: The skill initiates a network connection to
www.lazyweb.comto fetch executable content. This domain is not recognized as a trusted organization or well-known service within the analysis framework, and it does not match the known infrastructure patterns for the skill author 'aboul3ata'.
Recommendations
- HIGH: Downloads and executes remote code from: https://www.lazyweb.com/install.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata