Frontend UX
Warn
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
catalog.jsonfile defines an installation command that fetches a markdown file from an external domain (ethskills.com). External downloads from non-standard or unverified sources can introduce malicious instructions or content.\n- [REMOTE_CODE_EXECUTION]: The setup instructions incatalog.jsonsuggest installing a Claude plugin directly from a GitHub repository (github.com/austintgriffith/ethskills). Installing external plugins is a form of remote code execution as it allows third-party code to run within the agent's context.\n- [COMMAND_EXECUTION]: The skill uses thecurlcommand to retrieve remote data as part of its installation and setup workflow, which executes external network requests.
Audit Metadata