Skills
Navigate
skills/lovstudio/skills/sgc-write-professional-book/Gen Agent Trust Hub

sgc-write-professional-book

Warn

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill instructions command the execution of remote scripts using npx and uvx.
  • Evidence: The README instructs users to run npx lovstudio skills add write-professional-book and uvx lovstudio-skill-helper decrypt write-professional-book.
  • [COMMAND_EXECUTION]: The skill requires shell command execution to manage its distribution and decryption process.
  • Evidence: Specific shell commands are provided to download and decrypt the skill content within the agent environment.
  • [EXTERNAL_DOWNLOADS]: The skill relies on fetching external distribution packages and helper utilities from vendor infrastructure.
  • Evidence: The skill downloads an "encrypted distribution package" and references the lovstudio-skill-helper utility.
  • [SAFE]: The identified tools and resources (lovstudio, lovstudio-skill-helper) originate from the stated author 'lovstudio', which is consistent with the skill's intended functional distribution mechanism.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 10, 2026, 01:46 PM
Security Audit — agent-trust-hub — sgc-write-professional-book