devtools-hub-installer
Fail
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONREMOTE_CODE_EXECUTIONPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to download a Windows executable installer from an external GitHub repository (
github.com/lszdeveloping/devtoolshub). - [COMMAND_EXECUTION]: The skill provides instructions to execute the downloaded
.exeinstaller and various CLI commands that trigger system-level changes. - [PRIVILEGE_ESCALATION]: The skill explicitly states that most operations require administrator permissions and utilizes UAC elevation for installation tasks. It also instructs the user to lower the system's security posture by changing the PowerShell execution policy to
RemoteSignedfor theLocalMachinescope. - [REMOTE_CODE_EXECUTION]: The provided template for adding new tools (
newtool.ps1) demonstrates a pattern of downloading an executable from an external URL (https://example.com/newtool-installer.exe) and executing it with administrative rights usingStart-Process. - [PERSISTENCE]: The skill includes code to modify the machine-level
Pathenvironment variable, which ensures that newly installed tools remain accessible across sessions and can influence system behavior globally.
Recommendations
- AI detected serious security threats
Audit Metadata