product-position
Warn
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is a catalogue stub that points to an external GitHub repository (
github.com/firatcand/founder-skills) for its complete functionality. This source is not recognized as a trusted organization or well-known service. - [COMMAND_EXECUTION]: The documentation provides shell commands for the agent to execute, including a filesystem check and an installation command (
npx skills add) to fetch remote content. - [REMOTE_CODE_EXECUTION]: The skill facilitates the execution of remote logic by instructing the agent to download and install code/instructions from an unverified third-party repository into the local agent environment.
Audit Metadata