ai-agent-deep-dive-teaching-framework

Fail

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The framework implements a skill discovery system that dynamically loads and executes Python modules from a specified local directory (./skills). This allows the agent to interact with pluggable capabilities defined as standalone script files.
  • [EXTERNAL_DOWNLOADS]: The documentation provides instructions to install the Poetry dependency manager by fetching a script from its official domain (install.python-poetry.org) and piping it to the Python interpreter. This is a standard installation method for the tool.
  • [EXTERNAL_DOWNLOADS]: The installation guide includes a command to clone the project source code from a public GitHub repository.
Recommendations
  • HIGH: Downloads and executes remote code from: https://install.python-poetry.org - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
May 16, 2026, 07:29 PM
Security Audit — agent-trust-hub — ai-agent-deep-dive-teaching-framework