setup-expert-feedback-remote-tool
Warn
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads a requirements file from an external domain (
https://connect.aiscientist.tools/install-requirements.txt) that is not recognized as a trusted organization or well-known service. - [REMOTE_CODE_EXECUTION]: The skill installs a Python wheel (
tuplatform-connect) directly from a remote URL (https://connect.aiscientist.tools/downloads/tuplatform_connect-0.3.0-py3-none-any.whl). While a SHA-256 hash is provided for integrity, the source is a non-standard domain, posing a risk of executing unverified code. - [COMMAND_EXECUTION]: The skill provides several shell command blocks for environment setup, dependency management, and server operations. These commands include downloading and executing scripts and installing packages from external sources.
Audit Metadata