admin
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of various development tools and system packages from external sources. These include well-known services such as NodeSource for Node.js, Homebrew for macOS, and official package registries like NPM and PyPI. It also clones vendor-owned repositories from GitHub (e.g., 'github.com/evolv3-ai/vibe-skills.git').
- [REMOTE_CODE_EXECUTION]: Several scripts contain patterns for downloading and executing remote scripts via shell piping. Examples include bootstrapping the 'uv' package manager from 'astral.sh' and the vendor's own administrative installation script from GitHub. These operations are part of the skill's core functionality for environment setup and target trusted or well-known vendor resources.
- [COMMAND_EXECUTION]: The skill makes extensive use of system commands and subprocesses to manage the host machine. This includes using 'apt' and 'systemctl' on Linux/WSL, and 'winget', 'scoop', and PowerShell cmdlets on Windows. All command execution is focused on the stated purpose of system administration and tool management.
- [PRIVILEGE_ESCALATION]: Administrative operations on Linux and WSL utilize 'sudo' to perform tasks such as updating package indices and installing software. On Windows, the skill provides guidance on setting execution policies. These elevation patterns are required for the skill's intended use-case of system-level administration.
Audit Metadata