skills/bradfrost/skills/ds-inspection/Gen Agent Trust Hub

ds-inspection

Warn

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: In stations/station-01-coverage-gaps.md, the skill instructs the user or agent to connect to an external HTTP MCP endpoint (https://design-systems-mcp.southleft.com/mcp) provided by an unverified third party (southleft).
  • [REMOTE_CODE_EXECUTION]: Adding an untrusted external HTTP MCP server via claude mcp add --transport http design-systems https://design-systems-mcp.southleft.com/mcp introduces remote capabilities and tool definitions that can interact with the agent's environment, creating a potential risk of unauthorized data exposure or remote execution depending on the server's implementation.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 15, 2026, 08:22 AM