ts-dev
Fail
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the execution of a remote script using a piped command
curl -fsSL https://vite.plus | bashinreferences/setup.md. This method downloads and executes code directly from an external domain in the local shell environment, which is a high-risk pattern for arbitrary code execution. - [EXTERNAL_DOWNLOADS]: The skill requires the global installation of packages
vite-plusand@voidzero-dev/vite-plus-corefrom sources that are not part of the established trusted vendor list. Additionally, it specifies dependencies on project-specific scoped packages@serendie/design-token,@serendie/symbols, and@serendie/uiwithout a verified or standard public registry origin. - [COMMAND_EXECUTION]: The skill provides multiple commands for system-level configuration and dependency management, including
pnpm exec playwright install --with-depswhich downloads and installs external browser binaries and system libraries at runtime, andpre-commit installwhich modifies local git hooks.
Recommendations
- AI detected serious security threats
Audit Metadata