platform-design-skills

Warn

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references an external GitHub repository (github.com/ehmo/platform-design-skills) as its primary source of logic, which is not a verified or trusted organization.
  • [REMOTE_CODE_EXECUTION]: The installation instructions use npx skills add, which fetches and executes a Node.js package from the registry to perform local system modifications and remote content ingestion.
  • [COMMAND_EXECUTION]: The documentation encourages the use of platform-specific shell execution triggers (specifically the ! prefix) to run installation and environment check commands like ls and grep within the agent's context.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 25, 2026, 06:33 PM
Security Audit — agent-trust-hub — platform-design-skills