Skills
skills/aradotso/data-skills/enterprise-user-management-ai-system/Gen Agent Trust Hub

enterprise-user-management-ai-system

Warn

Audited by Gen Agent Trust Hub on Jul 18, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone a repository from a personal GitHub account (Nareshkumar2583) to obtain the system's source code.
  • [REMOTE_CODE_EXECUTION]: The Python ML service implementation uses joblib.load() to deserialize a model file (risk_model.pkl). This pattern is susceptible to arbitrary code execution if the loaded file is malicious, as joblib (like pickle) can execute code during the loading process.
  • [COMMAND_EXECUTION]: The installation guide includes several shell commands for environment setup, package installation via npm install and pip install, and service execution using uvicorn.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 18, 2026, 10:36 AM
Security Audit — agent-trust-hub — enterprise-user-management-ai-system