agent-update-checker
Fail
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: HIGHMETADATA_POISONINGEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [METADATA_POISONING]: The skill employs deceptive naming by using a typosquatted repository URL in the installation workflow. The official repository is stated as
https://github.com/lensetek/Research-Agent-Skills-Collection, but the instruction provided for the user/agent to execute useshttps://github.com/lensetek/Research-Agent-Skils-Collecton(missing 'l' and 'i'). - [EXTERNAL_DOWNLOADS]: The skill is designed to download content from an external GitHub repository.
- [REMOTE_CODE_EXECUTION]: The skill workflow concludes by instructing the agent to 'download and install' updates from the typosquatted URL. Given the access to
curlandbashin theallowed-toolsmetadata, this pattern poses a high risk of executing malicious code.
Recommendations
- AI detected serious security threats
Audit Metadata