Skills
Navigate
skills/aboul3ata/lazyweb-skill/lazyweb-search-flows/Gen Agent Trust Hub

lazyweb-search-flows

Fail

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: CRITICALREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill instructions direct the agent to download and execute a remote shell script using a piped command.
  • Evidence: curl -fsSL https://www.lazyweb.com/install.sh | bash in SKILL.md.
  • Risk: This allows an untrusted third party to execute arbitrary code on the user's system. The script's content can be modified by the server owner at any time without the user's knowledge or consent.
  • [COMMAND_EXECUTION]: The skill requires the Bash tool and specifies commands to be run in the terminal.
  • Evidence: allowed-tools includes Bash and instructions include running lazyweb_health and the aforementioned curl command.
Recommendations
  • HIGH: Downloads and executes remote code from: https://www.lazyweb.com/install.sh - DO NOT USE without thorough review
  • AI detected serious security threats
Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 14, 2026, 04:23 AM
Security Audit — agent-trust-hub — lazyweb-search-flows