logo-designer-skill
Fail
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download a plugin from an external, unverified GitHub repository:
https://github.com/neonwatty/logo-designer-skill. - [REMOTE_CODE_EXECUTION]: The provided installation instructions use
claude plugin add neonwatty/logo-designer-skill, which downloads and executes code from the third-party repository within the agent's environment. - [COMMAND_EXECUTION]: The skill contains explicit instructions to run shell commands to install the external plugin, enabling the execution of arbitrary code from the remote source.
Recommendations
- AI detected serious security threats
Audit Metadata