design-motion-principles
Warn
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is configured as a 'catalogue stub' that directs the agent to download the full skill implementation from a third-party GitHub repository (
kylezantos/design-motion-principles). This introduces a dependency on unverified external code. - [COMMAND_EXECUTION]: The
SKILL.mdfile contains shell commands designed to be executed by the agent to check for existing installations and to perform a global or project-level install. These commands include file system probes and the use ofgrepto parse file contents. - [REMOTE_CODE_EXECUTION]: The installation process utilizes
npx skills add, which fetches and executes a remote package. This method of installation dynamically loads and runs external code from a source that is not part of the verified vendor infrastructure.
Audit Metadata