javascript-pro

Fail

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: CRITICALCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides documentation and executable code examples for spawning child processes and executing arbitrary shell commands within a Node.js environment.
  • Evidence in references/node-essentials.md: Usage of child_process.exec and child_process.spawn for commands such as ls -la and running other Node.js scripts.
  • [EXTERNAL_DOWNLOADS]: The skill references several external URLs for the author's profile, company, and project documentation.
  • Evidence in SKILL.md: Links to https://github.com/Jeffallan, https://synergetic.solutions, and https://jeffallan.github.io/claude-skills/skills/language/javascript-pro/.
  • Security Alert: Automated scanners have identified the documentation path on jeffallan.github.io as appearing on some URL blacklists.
Recommendations
  • Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 16, 2026, 09:59 AM