stylekit
Fail
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONPROMPT_INJECTIONPERSISTENCECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The script
scripts/update-skill.pyis designed to download a ZIP archive from the official repository on GitHub and replace the skill's own instructions and executable scripts on the local filesystem. - [PROMPT_INJECTION]: The
SKILL.mdfile instructs the agent to run an automatic update check usingupdate-skill.pyat the start of every session and specifically tells the agent to "reopen and reread" the skill if an update is detected, allowing the skill to dynamically modify the agent's operating instructions. - [PERSISTENCE]: The automatic update mechanism, combined with the instruction for the agent to run it on every invocation, establishes a persistent update channel that survives across different agent sessions.
- [COMMAND_EXECUTION]: Several utility scripts, including
benchmark.pyandgenerate-release-manifest.py, utilize thesubprocessmodule to execute other Python processes and system commands. - [INDIRECT_PROMPT_INJECTION]: The skill fetches visual design specifications from the
stylekit.topAPI, includingaiRulesandphilosophytext blocks that the agent is directed to follow as constraints, creating a surface for externally sourced instructions to influence agent behavior. - [DYNAMIC_EXECUTION]: The skill employs
importlib.utilin scripts likeeval-check.pyandbenchmark.pyto dynamically load and execute Python modules from the local directory at runtime.
Recommendations
- AI detected serious security threats
Audit Metadata