hud-tokio-profiler
Fail
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads executable content from a third-party GitHub repository not identified as a trusted source.
- Evidence:
curl -L https://github.com/cong-or/hud/releases/latest/download/hud-linux-x86_64.tar.gzin SKILL.md. - Evidence:
git clone https://github.com/cong-or/hud.gitin SKILL.md. - [REMOTE_CODE_EXECUTION]: Executes binaries or builds source code obtained from remote, unverified locations.
- Evidence: The skill directs users to run the downloaded
hudbinary or build it from source and then execute it. - [COMMAND_EXECUTION]: Uses high-privilege commands to run unverified software, which could lead to full system compromise.
- Evidence: Multiple instructions to use
sudowhen running thehudtool (e.g.,sudo ./hud,sudo ./target/release/hud).
Recommendations
- AI detected serious security threats
Audit Metadata