superdesign-skill

Warn

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install a global Node.js package (@superdesign/cli) from the NPM registry and add a remote skill from a GitHub repository (superdesigndev/superdesign-skill). These external dependencies originate from community sources that are not recognized as trusted vendors.
  • [COMMAND_EXECUTION]: The instructions direct the user or agent to execute shell commands for environment setup and operation, including npm install -g @superdesign/cli@latest, npx skills add superdesigndev/superdesign-skill, and the superdesign CLI tool.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 25, 2026, 06:33 PM
Security Audit — agent-trust-hub — superdesign-skill