fixing-motion-performance
Warn
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to install and execute code from an external GitHub repository (
github.com/ibelick/ui-skills) using thenpx skills addcommand. This pattern involves downloading and running unverifiable third-party code at runtime. - [COMMAND_EXECUTION]: The skill contains multiple shell command strings intended for the agent to execute in order to determine the installation status and directory scope (global vs. project) on the local filesystem. This includes the use of
grep,echo, and conditional shell operators. - [EXTERNAL_DOWNLOADS]: The skill is configured as a stub that fetches its full implementation and implementation logic from an external upstream source (
https://github.com/ibelick/ui-skills). This creates a dependency on external content that could be modified without notice.
Audit Metadata