prd-mastery
Fail
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the user to an external GitHub repository (github.com/gocallum/nextjs16-agent-skills) to download its primary functionality.
- [REMOTE_CODE_EXECUTION]: The provided installation command
npx skills add gocallum/nextjs16-agent-skillsdownloads and installs code from an unvetted third-party source. The skill explicitly states that this source is not vetted or pinned, posing a high risk of executing malicious or untrusted content.
Recommendations
- AI detected serious security threats
Audit Metadata