unit-3-hyprland-nier-rice
Fail
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill promotes a 'Quick Install' method using
bash <(curl -fsSL https://raw.githubusercontent.com/samyns/Unit-3/main/install.sh). This pattern is highly insecure as it executes code directly from the internet without user inspection, representing a classic remote code execution vector. - [EXTERNAL_DOWNLOADS]: All installation resources and configuration files are fetched from an external, untrusted GitHub repository (
samyns/Unit-3), which has not been verified for safety. - [COMMAND_EXECUTION]: The skill uses
Process.execwithin QML widgets (e.g., inWallpaperPicker.qml) to run shell commands. While functional for a desktop theme, this increases the risk if the source code is introduced via an unvetted remote installer.
Recommendations
- HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/samyns/Unit-3/main/install.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata