Skills
skills/aradotso/data-skills/enterprise-user-management-system-ai-analytics/Gen Agent Trust Hub

enterprise-user-management-system-ai-analytics

Warn

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill clones a project repository from an unverified personal GitHub account.\n
  • Evidence: git clone https://github.com/Nareshkumar2583/Enterprise-User-Management-System-with-AI-Analytics.git\n- [REMOTE_CODE_EXECUTION]: The installation process involves running several services from the downloaded code, which could lead to arbitrary code execution if the repository is compromised or malicious.\n
  • Evidence: Execution of npm start in the backend directory and uvicorn main:app in the ml-service directory.\n- [COMMAND_EXECUTION]: Multiple shell commands are used to install dependencies and configure environment variables.\n
  • Evidence: Use of npm install, pip install -r requirements.txt, and shell heredocs to create .env files.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 13, 2026, 04:46 AM
Security Audit — agent-trust-hub — enterprise-user-management-system-ai-analytics