alterlab-survey-analysis
Warn
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
csSamplingR package directly from a personal GitHub repository (RyanHornby/csSampling) because it is not available on the official Comprehensive R Archive Network (CRAN). - [REMOTE_CODE_EXECUTION]: By instructing the agent to use
remotes::install_github, the skill triggers the download and execution of unvetted code from a remote source during the environment setup phase. - [COMMAND_EXECUTION]: The skill relies on executing shell commands via
Rscriptanduv run pythonto perform data analysis, which allows for the execution of generated scripts on the host system.
Audit Metadata