Skills
Navigate
skills/hacho55/absolutelyskilled/real-time-streaming/Gen Agent Trust Hub

real-time-streaming

Warn

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The 'Companion check' section in SKILL.md instructs the agent to run an ls command on various local skill directories (e.g., ~/.claude/skills/, ~/.agent/skills/, and project-local paths) upon activation. This is used to silently probe the user's local filesystem for the presence of other installed components.- [EXTERNAL_DOWNLOADS]: The skill provides instructions to the agent to prompt the user to install additional packages using npx skills add AbsolutelySkilled/AbsolutelySkilled. This command facilitates the retrieval of remote code from an external repository.- [REMOTE_CODE_EXECUTION]: The recommendation to use npx for installation constitutes a remote code execution pattern, as it downloads and executes packages from a source that is not recognized as a trusted vendor.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 10, 2026, 02:06 PM
Security Audit — agent-trust-hub — real-time-streaming