setup-paga-remote-tool
Fail
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download a Python wheel file (
tuplatform_connect) from the URLhttps://connect.aiscientist.tools/downloads/tuplatform_connect-0.3.0-py3-none-any.whl. This domain is not identified as a trusted organization or well-known service. - [REMOTE_CODE_EXECUTION]: The package downloaded from the external domain is installed directly into the environment using
pip installand subsequently executed. Installing code from unverified sources is a high-risk pattern for remote code execution. - [COMMAND_EXECUTION]: The instructions involve executing multiple shell commands, including environment creation (
python3 -m venv), package installation, and the use of a custom CLI tool (tu) for remote authentication and server management.
Recommendations
- AI detected serious security threats
Audit Metadata