Skills
Navigate
skills/oliver-kriska/claude-elixir-phoenix/mix-compression/Gen Agent Trust Hub

mix-compression

Warn

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the rtk (Rust Token Killer) utility from a third-party GitHub repository (rtk-ai/rtk) via a Homebrew tap. This introduces a binary dependency from an external source that is not part of the established trusted vendor list.
  • [COMMAND_EXECUTION]: The installation process involves running rtk init zsh or rtk init bash, which modifies the user's shell profile files (~/.zshrc or ~/.bashrc). This behavior establishes a persistence mechanism by installing a transparent rewrite hook that intercepts and alters the execution of standard mix commands in every new shell session.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 30, 2026, 02:01 PM
Security Audit — agent-trust-hub — mix-compression