Skills
Navigate
skills/calionauta/agent-sync-public/stelow-product-coding-standards/Gen Agent Trust Hub

stelow-product-coding-standards

Warn

Audited by Gen Agent Trust Hub on Jul 18, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and downloads several external packages and plugins from third-party NPM scopes and GitHub repositories.
  • Evidence: references/cli-tools/agent_browser.md references @earendil-works/pi-agent-browser.
  • Evidence: references/cli-tools/safe-change.md references github.com/PriNova/pi-agent-codebase-workflows.
  • Evidence: references/cli-tools/todo.md references @tintinweb/pi-tasks.
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and immediately execute code from remote sources using tools like npx or pi install.
  • Evidence: npx -y @earendil-works/pi-agent-browser open --url "{URL}" -- snapshot -i in agent_browser.md.
  • Evidence: pi install git:github.com/cursor/plugins in codequality-review.md.
  • Evidence: npx -y @plannotator/pi-extension in plannotator.md.
  • [COMMAND_EXECUTION]: The skill utilizes shell scripts and Node.js one-liners to manage configuration and state.
  • Evidence: references/cli-tools/read-config.md uses node -e to parse and extract data from the stelow.json file.
  • Evidence: references/cli-tools/file-locking.md contains bash scripts for managing file reservations via ln and sha1sum.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 18, 2026, 10:48 AM
Security Audit — agent-trust-hub — stelow-product-coding-standards