delegate-access
Fail
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: HIGHCOMMAND_EXECUTIONDYNAMIC_EXECUTIONMETADATA_POISONING
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the user or agent to open browser DevTools and execute JavaScript code in the console while on the
x.comdomain. This pattern allows the script to act with the full permissions of the logged-in user, potentially bypassing UI-based security controls and facilitating unauthorized actions. - [DYNAMIC_EXECUTION]: The instructions require pasting and running the contents of a local file (
src/delegateAccess.js) into a web context. Executing unverified scripts in a browser session is a high-risk activity that can lead to session hijacking or credential theft. - [METADATA_POISONING]: The YAML frontmatter identifies the author as
nichxbt, which contradicts the provided skill context identifying the author asnirholas. Discrepancies in metadata can be used to obfuscate the true origin or intent of a skill.
Recommendations
- AI detected serious security threats
Audit Metadata