liquid-glass-skill
Warn
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONMETADATA_POISONING
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install content from an external, unverified GitHub repository (
haider-nawaz/liquid-glass-skill). - [REMOTE_CODE_EXECUTION]: The installation process involves the use of
npxand theskills addcommand to fetch and potentially execute code from a remote source not listed among trusted providers. - [COMMAND_EXECUTION]: The
SKILL.mdfile contains shell commands designed to check for the presence of files and install software globally or locally within the user's project environment. - [METADATA_POISONING]: The skill's description and trigger phrases reference "iOS 26" and "macOS 26", software versions that do not currently exist. This deceptive framing could mislead users or agents regarding the skill's utility and the provenance of its data.
Audit Metadata