karpathy-guidelines
Warn
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation includes instructions to install a plugin from an unvetted external GitHub repository:
https://github.com/multica-ai/andrej-karpathy-skills. - [REMOTE_CODE_EXECUTION]: Following the provided commands (
/plugin install) leads to the download and execution of third-party code that is not pinned or verified by the vendor.
Audit Metadata