database-engineering
Warn
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's documentation directs users to companion skills hosted on the GitHub repository 'AbsolutelySkilled/AbsolutelySkilled'. Promoting the use of code from unverified third-party repositories increases the risk of supply chain compromise.- [COMMAND_EXECUTION]: The 'Related skills' section explicitly instructs the user to run the command 'npx skills add AbsolutelySkilled/AbsolutelySkilled --skill '. This command involves downloading and executing a package from the npm registry and pulling data from a remote GitHub repository, enabling the execution of external, unverified code on the host machine.
Audit Metadata