security
Fail
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Reference to a URL flagged as malicious by automated scanners.\n
- Evidence: The skill references
https://evil-example.cominreferences/advanced-patterns.mdas an example of an attacker-controlled domain in a CORS configuration discussion.\n- [CREDENTIALS_UNSAFE]: Inclusion of patterns and scripts for identifying hardcoded secrets, which triggered automated malware detections.\n - Evidence:
references/advanced-patterns.mdcontains audit scripts designed to search forsk_live,sk_test,api_key, andpasswordpatterns within a project's source code.\n- [COMMAND_EXECUTION]: Provision of shell commands for local security auditing and vulnerability scanning.\n - Evidence: The skill includes commands such as
grepfor secret detection andmix deps.auditfor checking project dependencies for known vulnerabilities inreferences/advanced-patterns.mdandreferences/security-headers.md.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- AI detected serious security threats
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata