skills/bankrbot/skills/Frontend UX/Gen Agent Trust Hub

Frontend UX

Warn

Audited by Gen Agent Trust Hub on Jul 5, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The catalog.json file defines an installation command that fetches a markdown file from an external domain (ethskills.com). External downloads from non-standard or unverified sources can introduce malicious instructions or content.\n- [REMOTE_CODE_EXECUTION]: The setup instructions in catalog.json suggest installing a Claude plugin directly from a GitHub repository (github.com/austintgriffith/ethskills). Installing external plugins is a form of remote code execution as it allows third-party code to run within the agent's context.\n- [COMMAND_EXECUTION]: The skill uses the curl command to retrieve remote data as part of its installation and setup workflow, which executes external network requests.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 5, 2026, 02:11 PM
Security Audit — agent-trust-hub — Frontend UX