email-security-auditor-cpp
Fail
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONMETADATA_POISONING
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides explicit instructions to download and run an opaque executable file (
Email.Security.Auditor.Installer.exe) from the releases page of an unverified third-party repository. Executing compiled binaries from untrusted sources is a high-risk activity that can lead to complete system compromise.- [EXTERNAL_DOWNLOADS]: The skill references code and binary assets from an unverified GitHub user account (sipaaryadi06864) which lacks any affiliation with the stated author or known trusted organizations. This discrepancy is a common indicator of a software supply chain threat.- [COMMAND_EXECUTION]: The documentation encourages the execution of unverified installers and shell-based build commands for source code from an untrusted origin, facilitating the potential execution of malicious payloads on the user's host machine.- [METADATA_POISONING]: The skill uses a professional-sounding name and description ("Email Security Auditor") to build trust, while simultaneously directing users toward high-risk, unverified installation paths, which may cause users to misjudge the safety of the provided resources.
Recommendations
- AI detected serious security threats
Audit Metadata