liquid-glass-skill
Warn
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is a catalogue stub that directs the agent to download and install external code from a third-party GitHub repository (haider-nawaz/liquid-glass-skill).
- [COMMAND_EXECUTION]: The instructions explicitly guide the agent to use shell execution capabilities (the '!' prefix syntax) to perform system-level operations such as adding plugins.
- [REMOTE_CODE_EXECUTION]: The skill promotes the installation of unverified remote code via a plugin marketplace command, which can lead to the execution of arbitrary scripts on the host system.
Audit Metadata