design-debt-audit
Warn
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill initiates the download and installation of external code from a third-party GitHub repository (Owl-Listener/designer-skills). This is performed via the 'npx skills add' command, which executes content from an unverified external source.
- [COMMAND_EXECUTION]: The skill contains bash commands designed to be executed in the user terminal to detect the environment scope (global vs. project) and manage the local filesystem within the agent's configuration directories (~/.agents/skills).
Audit Metadata