Skills
skills/podo/design-agent-skills/color-expert/Gen Agent Trust Hub

color-expert

Warn

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructions provide shell commands for the agent to execute, including grep and file existence checks ([ -e ...]), to determine if the full version of the skill is already installed.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates downloading its full implementation from an external GitHub repository (github.com/meodai/skill.color-expert) using the npx skills add command.
  • [REMOTE_CODE_EXECUTION]: By directing the agent to install and load a full skill from a remote third-party source at runtime, the skill enables the execution of instructions and potential scripts that have not been verified in the current context.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 13, 2026, 08:09 AM
Security Audit — agent-trust-hub — color-expert