lov-visual-clone
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEOBFUSCATIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [OBFUSCATION]: The core skill instructions are stored in an encrypted format within SKILL.md.enc using AES-256-GCM, as specified in MANIFEST.enc.json. This encryption is utilized as a digital rights management (DRM) mechanism for paid content, preventing static analysis of the primary logic without the vendor's decryption tool.
- [EXTERNAL_DOWNLOADS]: The skill documentation instructs the use of npx and uvx to download external packages, specifically 'lovstudio' and 'lovstudio-skill-helper'. These are vendor-owned resources used for skill management and decryption.
- [REMOTE_CODE_EXECUTION]: The installation and usage workflow involves running remote code via 'npx lovstudio skills add' and 'uvx lovstudio-skill-helper decrypt'. These commands download and execute tools from external registries at runtime to handle the encrypted skill content.
Audit Metadata