localization-design
Warn
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch external content from
https://github.com/Owl-Listener/designer-skills. This source is not categorized as a trusted organization or well-known service. - [REMOTE_CODE_EXECUTION]: The installation process uses
npx skills add Owl-Listener/designer-skills, which downloads and executes scripts from a remote repository at runtime. This allows for the execution of unverified code on the host system. - [COMMAND_EXECUTION]: The skill body contains several shell commands (
grep, file existence checks[ -e ... ], andnpx) intended for execution by the agent to manage its own installation state and perform global or local setup.
Audit Metadata