lovstudio-proposal
Warn
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill relies on the execution of an external Python utility,
lovstudio-skill-helper, via theuvxrunner. This tool is responsible for decrypting the primary skill logic, effectively acting as a dynamic loader for instructions. - [COMMAND_EXECUTION]: The instructions direct the AI agent to execute multiple shell commands, including
uvxfor decryption/activation andnpxfor package management (skills add). This grants the skill the ability to run arbitrary code on the host system to manage its own lifecycle. - [EXTERNAL_DOWNLOADS]: The decryption process is described as requiring an 'HTTP round-trip,' indicating that the skill makes network requests to an external server (presumably for license verification and key retrieval) every time it is invoked.
- [DYNAMIC_INSTRUCTION_LOADING]: By encrypting the
SKILL.mdcontent and requiring runtime decryption, the skill bypasses static analysis. The agent is instructed to follow the decrypted output 'to the letter,' which allows the vendor to update or change the agent's behavior dynamically without updating the skill files themselves.
Audit Metadata