design-impact-reporting
Warn
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill serves as a redirect to an external GitHub repository (
Owl-Listener/designer-skills). It contains instructions to fetch the full version of the skill from this unverified community source. - [REMOTE_CODE_EXECUTION]: The skill provides instructions to use the
npx skills addcommand. This process downloads and executes community-authored code on the local system, which could lead to the execution of malicious logic if the upstream repository is compromised. - [COMMAND_EXECUTION]: The skill includes shell commands designed to detect the local installation state and environment. These commands use
grepand file existence checks ([ -e ... ]) to determine if the skill is already present in the agent's configuration directories.
Audit Metadata