search-ux
Warn
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is designed to fetch and install additional data and scripts from the repository
https://github.com/Owl-Listener/designer-skillsusing an external installer tool. - [REMOTE_CODE_EXECUTION]: The instructions command the agent to use
npx skills addto download and integrate remote skill content from an untrusted GitHub user (Owl-Listener). This results in the execution of third-party content within the agent's environment. - [COMMAND_EXECUTION]: The skill provides several shell commands for the agent to run directly, including
grepfor file system checks andnpxfor package/skill installation. It explicitly encourages the use of the!shell execution prefix available in certain environments (e.g., Claude Code) to perform these installations. - [REMOTE_CODE_EXECUTION]: The workflow involves a 'detect and install' pattern where the agent checks for local files and, if missing, proceeds to download remote code to satisfy dependencies.
Audit Metadata