grow-business

Warn

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill directs the agent to suggest or execute npx skills add commands to install external dependencies (e.g., npx skills add wondelai/skills --global). Using npx facilitates the execution of code from remote packages, which is a potential security risk if the package source is unverified.\n- [EXTERNAL_DOWNLOADS]: The skill is designed to fetch additional functional components from the wondelai namespace at runtime. These external resources are not bundled with the skill, creating a dependency on third-party hosted content.\n- [REMOTE_CODE_EXECUTION]: The execution of the business growth journey depends on invoking external skills or installing them via shell commands. This model allows for the execution of remote logic that is not audited within the context of the primary skill.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 30, 2026, 01:43 PM