taste-skill
Warn
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of external code from a third-party GitHub repository (
Leonxlnx/taste-skill) that is not associated with a recognized trusted organization. - [REMOTE_CODE_EXECUTION]: The instructions direct the agent to execute
npx skills add Leonxlnx/taste-skill --skill taste-skill -y. This command downloads and installs logic from a remote source, and the-yflag is used to automatically accept all prompts, which bypasses typical interactive security confirmations. - [COMMAND_EXECUTION]: The skill provides shell commands (
grep,[ -e ...]) to check the local filesystem and installation state. It also explicitly instructs the agent to use a silent execution syntax (the!prefix) to perform these tasks autonomously within the conversation context.
Audit Metadata