data-analysis-skill
Warn
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's primary function is to act as a placeholder that triggers the download and installation of additional code from an external, untrusted GitHub repository:
https://github.com/dongzhang84/data-analysis-skill. - [REMOTE_CODE_EXECUTION]: The skill provides instructions for the agent to execute shell commands (
npx skills add ...) that download and run code from a remote source. This pattern is used to pivot from the initial stub to a full execution environment from an unverified third party. - [COMMAND_EXECUTION]: The skill includes shell commands (
grep, file existence checks) that the agent is instructed to run locally to determine the environment state and installation path.
Audit Metadata