wondelai-skills

Warn

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download external packages from https://github.com/wondelai/skills via the npx skills add command.
  • [REMOTE_CODE_EXECUTION]: The installation process utilizes npx to fetch and execute code from a community-provided GitHub repository that is not part of the established trusted organizations.
  • [COMMAND_EXECUTION]: The skill includes shell commands within the 'Decision tree' section that perform file system checks and content searching (e.g., grep) within the user's ~/.agents/skills/ directory to determine installation status.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 22, 2026, 09:34 PM