skill-publish-sync

Fail

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides installation instructions that involve downloading a shell script from a remote Tencent Cloud COS bucket and piping it directly to the bash shell (curl -fsSL https://skillhub-1388575217.cos.ap-guangzhou.myqcloud.com/install/install.sh | bash). This executes unverified code from an external source.
  • [COMMAND_EXECUTION]: The skill utilizes several local shell scripts (prepare-publish.sh and push-lenovo-batch.sh) to automate the publishing workflow. these scripts execute system commands such as rsync, git, cp, and rm to manage file sets and temporary directories.
  • [EXTERNAL_DOWNLOADS]: The skill depends on external CLI utilities for its primary functionality. It downloads a standalone installer for the skillhub tool and uses npx to dynamically fetch and run the @lenovo-open/skill-cli package from the NPM registry.
  • [DYNAMIC_EXECUTION]: The prepare-publish.sh script uses a Python heredoc (`python3
  • <<'PYEOF') to execute code at runtime that parses YAML configuration files and dynamically modifies the frontmatter of SKILL.mdfiles. Thepush-lenovo-batch.shscript uses theexpect` tool to automate responses to interactive prompts from external CLI tools.
Recommendations
  • HIGH: Downloads and executes remote code from: https://skillhub-1388575217.cos.ap-guangzhou.myqcloud.com/install/install.sh - DO NOT USE without thorough review
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Aug 21, 2026, 04:24 PM
Security Audit — agent-trust-hub — skill-publish-sync