lovstudio-proposal

Warn

Audited by Gen Agent Trust Hub on May 3, 2026

Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill relies on the execution of an external Python utility, lovstudio-skill-helper, via the uvx runner. This tool is responsible for decrypting the primary skill logic, effectively acting as a dynamic loader for instructions.
  • [COMMAND_EXECUTION]: The instructions direct the AI agent to execute multiple shell commands, including uvx for decryption/activation and npx for package management (skills add). This grants the skill the ability to run arbitrary code on the host system to manage its own lifecycle.
  • [EXTERNAL_DOWNLOADS]: The decryption process is described as requiring an 'HTTP round-trip,' indicating that the skill makes network requests to an external server (presumably for license verification and key retrieval) every time it is invoked.
  • [DYNAMIC_INSTRUCTION_LOADING]: By encrypting the SKILL.md content and requiring runtime decryption, the skill bypasses static analysis. The agent is instructed to follow the decrypted output 'to the letter,' which allows the vendor to update or change the agent's behavior dynamically without updating the skill files themselves.
Audit Metadata
Risk Level
MEDIUM
Analyzed
May 3, 2026, 04:11 AM