awesome-design-skills

Pass

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the retrieval of external design configurations and instructions from github.com/bergside/awesome-design-skills. Users are prompted to download SKILL.md and DESIGN.md files for 67 different design aesthetics.
  • [COMMAND_EXECUTION]: The documentation provides explicit shell commands for interaction, including npx typeui.sh list and npx typeui.sh pull <slug>. These commands are intended to be executed in the user's terminal to manage the installation of design styles.
  • [REMOTE_CODE_EXECUTION]: The use of npx with the typeui.sh package name results in the download and execution of remote code from the NPM registry. This is the primary method for providing the skill's promised functionality but involves executing third-party code from an unverified source.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 25, 2026, 06:33 PM
Security Audit — agent-trust-hub — awesome-design-skills