hud-tokio-profiler

Fail

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Downloads executable content from a third-party GitHub repository not identified as a trusted source.
  • Evidence: curl -L https://github.com/cong-or/hud/releases/latest/download/hud-linux-x86_64.tar.gz in SKILL.md.
  • Evidence: git clone https://github.com/cong-or/hud.git in SKILL.md.
  • [REMOTE_CODE_EXECUTION]: Executes binaries or builds source code obtained from remote, unverified locations.
  • Evidence: The skill directs users to run the downloaded hud binary or build it from source and then execute it.
  • [COMMAND_EXECUTION]: Uses high-privilege commands to run unverified software, which could lead to full system compromise.
  • Evidence: Multiple instructions to use sudo when running the hud tool (e.g., sudo ./hud, sudo ./target/release/hud).
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Jun 13, 2026, 06:07 AM