wcag-audit-patterns
Warn
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is a 'catalogue stub' that directs the agent to fetch external code from a repository (wshobson/agents) not belonging to a known trusted organization.
- [COMMAND_EXECUTION]: The instructions explicitly guide the agent to execute shell commands (
npx skills add) to install the external dependency. - [COMMAND_EXECUTION]: The skill provides platform-specific instructions for Claude Code, encouraging the use of the
!prefix to execute shell commands automatically or via user message injection to perform the installation.
Audit Metadata