setup-chrombpnet-remote-tool
Fail
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the user to download and install a Python wheel file (
tuplatform_connect-0.3.0-py3-none-any.whl) from an external domain (connect.aiscientist.tools). This domain is not a standard package registry (like PyPI) or a recognized trusted vendor repository. - [REMOTE_CODE_EXECUTION]: Installing a binary wheel from an untrusted remote source allows for arbitrary code execution on the host system during both the installation phase and subsequent tool execution.
- [COMMAND_EXECUTION]: The skill uses the
tuCLI to perform network operations, includingtu remote shareandtu serve --share --forward. These commands establish a network relay that exposes local HTTP endpoints (specifically the Model Context Protocol server on127.0.0.1:8032) to the external ToolUniverse platform.
Recommendations
- AI detected serious security threats
Audit Metadata