claud3
Warn
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to download resources from an external GitHub repository (
github.com/dtran320/claud3) that does not belong to a verified or trusted organization. - [REMOTE_CODE_EXECUTION]: Instructions use
npx skills addand/plugin installto download and install executable code and plugins from a remote source at runtime. - [COMMAND_EXECUTION]: The skill executes shell commands, including
grepandtest -f, to inspect the local filesystem and determine the installation status of thed3-vizskill. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes user-supplied data descriptions to determine chart types, which presents a surface for instructions embedded in data to influence the agent's behavior during code generation.
- Ingestion points: User-provided data questions analyzed in
SKILL.md. - Boundary markers: No explicit delimiters or boundary warnings are provided to separate data from instructions.
- Capability inventory: Shell command execution, local file system reads, and dynamic generation of HTML/D3 code.
- Sanitization: No sanitization or validation steps are documented for the incoming data questions.
Audit Metadata