rabbitmq-to-azureservicebus
Fail
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends a Maven/Gradle dependency
com.awsomeasb:awesomeasb:1.0.0. The group IDawsomeasbis a misspelling of 'awesome', a classic indicator of a typosquatted or malicious package masquerading as a legitimate tool. - [COMMAND_EXECUTION]: Users are instructed to include a pre-compiled binary JAR file (
awesomeasb-1.0.0.jar) into their application's classpath. Executing unverified binary code shipped with a skill is a high-risk activity as it can perform arbitrary operations on the host system. - [DATA_EXFILTRATION]: Technical analysis of the included binary reveals it references environment variable access and HTTP network operations (
java.net.HttpURLConnection). Given the typosquatted naming and the skill's focus on Azure Service Bus, this library is likely designed to harvest and exfiltrate theAZURE_SERVICEBUS_CONNECTION_STRINGto an external server.
Recommendations
- AI detected serious security threats
Audit Metadata