lazyweb-optimize-paywall
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill contains instructions for the agent to advise the user to install the required Lazyweb MCP environment by running a shell command that downloads and executes a script directly from the web:
curl -fsSL https://www.lazyweb.com/install.sh | bash. This script is hosted on the vendor's official domain. - [DATA_EXFILTRATION]: To generate optimization reports, the skill captures user-provided paywall screenshots and product names and transmits them to the vendor's API at
https://www.lazyweb.com/mcp. This data transfer is the core mechanism by which the skill performs its analysis. - [COMMAND_EXECUTION]: The skill uses local shell commands to read environment configuration from
~/.lazyweb/VERSIONand to manage file storage within the.lazyweb/optimize-paywall/directory.
Audit Metadata