aurakit
Fail
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download code from an external GitHub repository (
github.com/smorky850612/Aurakit.git) and a third-party NPM package (@smorky85/aurakit). - [REMOTE_CODE_EXECUTION]: The installation instructions include executing a script via
bash install.shafter cloning the repository. This pattern executes unverified scripts directly in the shell environment. - [COMMAND_EXECUTION]: The skill suggests using
npxto fetch and execute the@smorky85/aurakitpackage.npxis designed to run binaries from NPM packages immediately, which can lead to the execution of malicious code if the package is compromised or untrustworthy.
Recommendations
- AI detected serious security threats
Audit Metadata