marketingdashboard-financial-cockpit
Warn
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions require cloning a repository from an external source:
https://github.com/theBigGavin/marketingdashboard.git. While GitHub is a well-known service, the repository itself belongs to an unverified personal account. - [REMOTE_CODE_EXECUTION]: The skill workflow involves executing the downloaded code using
npm installandnpm run dev. This pattern allows for the execution of arbitrary code from the remote repository on the host system. - [COMMAND_EXECUTION]: The skill uses several shell commands to set up the environment, including
git clone,npm install,docker build, andechofor environment variable configuration. - [DATA_EXFILTRATION]: The application is designed to communicate with external APIs, including OpenRouter (using an API key) and various financial data providers. This creates a network footprint for data exchange between the local environment and external services.
Audit Metadata