skill-publish-sync
Fail
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides installation instructions that involve downloading a shell script from a remote Tencent Cloud COS bucket and piping it directly to the bash shell (
curl -fsSL https://skillhub-1388575217.cos.ap-guangzhou.myqcloud.com/install/install.sh | bash). This executes unverified code from an external source. - [COMMAND_EXECUTION]: The skill utilizes several local shell scripts (
prepare-publish.shandpush-lenovo-batch.sh) to automate the publishing workflow. these scripts execute system commands such asrsync,git,cp, andrmto manage file sets and temporary directories. - [EXTERNAL_DOWNLOADS]: The skill depends on external CLI utilities for its primary functionality. It downloads a standalone installer for the
skillhubtool and usesnpxto dynamically fetch and run the@lenovo-open/skill-clipackage from the NPM registry. - [DYNAMIC_EXECUTION]: The
prepare-publish.shscript uses a Python heredoc (`python3 - <<'PYEOF'
) to execute code at runtime that parses YAML configuration files and dynamically modifies the frontmatter ofSKILL.mdfiles. Thepush-lenovo-batch.shscript uses theexpect` tool to automate responses to interactive prompts from external CLI tools.
Recommendations
- HIGH: Downloads and executes remote code from: https://skillhub-1388575217.cos.ap-guangzhou.myqcloud.com/install/install.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata