javascript-pro
Fail
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: CRITICALCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides documentation and executable code examples for spawning child processes and executing arbitrary shell commands within a Node.js environment.
- Evidence in
references/node-essentials.md: Usage ofchild_process.execandchild_process.spawnfor commands such asls -laand running other Node.js scripts. - [EXTERNAL_DOWNLOADS]: The skill references several external URLs for the author's profile, company, and project documentation.
- Evidence in
SKILL.md: Links tohttps://github.com/Jeffallan,https://synergetic.solutions, andhttps://jeffallan.github.io/claude-skills/skills/language/javascript-pro/. - Security Alert: Automated scanners have identified the documentation path on
jeffallan.github.ioas appearing on some URL blacklists.
Recommendations
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata