Skills
skills/aradotso/design-skills/rocket-design-manufacturing-automation-shenzhen22/Gen Agent Trust Hub

rocket-design-manufacturing-automation-shenzhen22

Warn

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone source code from an external GitHub repository: https://github.com/Kevin100202/Rocket-Design-and-Manufacturing-Automation-Program-from-Shenzhen22highschool.git. This repository is hosted under a personal account rather than a verified organization.
  • [REMOTE_CODE_EXECUTION]: Following the download, the instructions specify running npm install and npm start. This pattern involves executing unverified third-party code, which could potentially contain malicious scripts or dependencies that execute upon installation.
  • [COMMAND_EXECUTION]: The skill uses several shell commands for project setup and execution, including git clone, npm install, npm run build, and npm start, which modify the local environment and execute external code.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 15, 2026, 12:03 PM
Security Audit — agent-trust-hub — rocket-design-manufacturing-automation-shenzhen22