skills/ascend-ai-coding/awesome-ascend-skills/external-cannbot-ops-aiss-tiling-solver/Gen Agent Trust Hub
external-cannbot-ops-aiss-tiling-solver
Fail
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the user to fetch binaries (
tiling_solverandplatform_info) from an external GitCode repository:https://gitcode.com/HIT1920/TilingSolver/releases/download/latest/. - [REMOTE_CODE_EXECUTION]: The skill instructs the user to download opaque executable binaries from a non-trusted third-party source and execute them on the local system using
chmod +xfollowed by direct execution. This pattern allows for arbitrary code execution with the permissions of the current user. - [COMMAND_EXECUTION]: The workflow relies on executing local commands such as
./platform_infoand./tiling_solver input.jsonto process hardware data and generate results, which involves running the previously downloaded external binaries.
Recommendations
- AI detected serious security threats
Audit Metadata