openjobs
Warn
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's installation instructions utilize
npx clawhub@latest, which downloads the latest version of an external package from the npm registry during execution. - [COMMAND_EXECUTION]: The provided command involves running third-party code directly through the
npxutility, allowing for the execution of unverified scripts from a remote source.
Audit Metadata