d3js-skill
Warn
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides explicit instructions and shell commands to download and install external content from a non-trusted GitHub repository (
github.com/chrisvoncsefalvay/claude-d3js-skill). - [REMOTE_CODE_EXECUTION]: The use of the
npx skills addcommand to fetch a skill from a remote repository constitutes a remote code execution risk. The downloaded skill will be integrated into the agent's environment and its instructions executed without prior verification of the remote repository's contents.
Audit Metadata