wireframer
Warn
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is designed as a stub to download the full implementation from a third-party GitHub repository (
agilek/wireframer-skill). This source is not recognized as a trusted organization or well-known service. - [REMOTE_CODE_EXECUTION]: The installation process involves
npx skills add, which fetches and installs code from a remote source into the agent's environment, potentially executing unverified code during the setup. - [COMMAND_EXECUTION]: The skill contains shell commands for the agent to execute, including file system existence checks and package manager invocations for the installation process.
- [PERSISTENCE]: The skill explicitly modifies persistent project configuration and instruction files such as
.cursorrules,CLAUDE.md, andagents.mdto append styling rules. This alters the agent's behavior and constraints for all future interactions within the project.
Audit Metadata