wondelai-skills
Warn
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download external packages from
https://github.com/wondelai/skillsvia thenpx skills addcommand. - [REMOTE_CODE_EXECUTION]: The installation process utilizes
npxto fetch and execute code from a community-provided GitHub repository that is not part of the established trusted organizations. - [COMMAND_EXECUTION]: The skill includes shell commands within the 'Decision tree' section that perform file system checks and content searching (e.g.,
grep) within the user's~/.agents/skills/directory to determine installation status.
Audit Metadata