localization-design
Warn
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install content from a third-party GitHub repository (
Owl-Listener/designer-skills) that is not among the verified or trusted organizations. This creates a dependency on an unverified external source. - [REMOTE_CODE_EXECUTION]: The installation process utilizes
npx skills add, which fetches and integrates remote skill code into the agent's environment. The use of the-yflag in the suggested command skips user confirmation during the installation process. - [COMMAND_EXECUTION]: The skill includes shell scripts designed to probe the local file system (specifically
~/.agents/skills/) to determine the installation status and decide which installation path to take (global vs. project scope).
Audit Metadata