apply-liquid-glass
Warn
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill (SKILL.md) instructs the agent to install
expo-glass-effectand@callstack/liquid-glassusingnpm installandexpo install. These packages do not appear to be official or recognized modules from the Expo or Callstack organizations, nor are they associated with the skill's author (khadinakbarlabs). - [REMOTE_CODE_EXECUTION]: Recommending the installation of unverified packages from public registries poses a risk of arbitrary code execution during the installation phase (via post-install scripts) or at runtime. The use of fictional references like 'iOS 26' and 'Liquid Glass' material increases the possibility that these package names are hallucinated or targets for typosquatting/brandjacking attacks.
Audit Metadata