skill-installer
Warn
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSPERSISTENCEPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs external agent extensions and executable code from arbitrary, user-specified remote GitHub repositories into the agent's environment without implementing signature verification or hash validation.
- [PERSISTENCE]: The documentation explicitly instructs the agent that it can overwrite preinstalled system skills (
.system) upon user insistence, presenting a risk of persistent modification of core agent behaviors or safety constraints across sessions. - [PRIVILEGE_ESCALATION]: The instructions explicitly direct the agent to request security or permission escalation when running inside a sandbox environment to execute the installation and configuration scripts.
Audit Metadata