Skills
Navigate
skills/instructa/agent-skills/no-mistakes/Gen Agent Trust Hub

no-mistakes

Fail

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill's installation fallback instructions include piping a remote shell script directly into the system shell (curl -fsSL https://raw.githubusercontent.com/kunchenguid/no-mistakes/main/docs/install.sh | sh). This pattern allows an external source to execute arbitrary commands on the user's machine without verification.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download and installation of binaries from an unverified external source (github.com/kunchenguid/no-mistakes) via both shell scripts and the go install command. These resources are not associated with the skill author or a trusted organization.
  • [COMMAND_EXECUTION]: The included helper script scripts/check_no_mistakes.py uses the subprocess module to execute system commands including git and no-mistakes doctor. While these are used for readiness checks, the execution environment and arguments are influenced by the local repository state.
Recommendations
  • HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/kunchenguid/no-mistakes/main/docs/install.sh - DO NOT USE without thorough review
  • AI detected serious security threats
Audit Metadata
Risk Level
CRITICAL
Analyzed
Jun 18, 2026, 10:24 PM
Security Audit — agent-trust-hub — no-mistakes