marp-slides
Warn
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is a pointer that triggers the download and installation of additional code from an external GitHub repository (robonuggets/marp-slides) using the npx package runner.- [COMMAND_EXECUTION]: The skill body contains shell commands (grep, test) designed to be executed by the agent to inspect the local file system and determine if the pointer has already been replaced by the full installation.- [COMMAND_EXECUTION]: The instructions explicitly guide the agent to execute npx installation commands, mentioning the ! prefix which triggers direct shell execution in specific agent environments.
Audit Metadata