webphysics-avbd-engine

Warn

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION

Full Analysis

[EXTERNAL_DOWNLOADS]: The skill documentation instructs the user to clone a source code repository from an external, unverified GitHub account (https://github.com/jure/webphysics.git).
[REMOTE_CODE_EXECUTION]: The provided installation and setup workflow involves running npm install and npm run dev on the downloaded content, which executes scripts and code from the unverified external repository on the user's system.

Audit Metadata

Risk Level

MEDIUM

Analyzed

Sep 14, 2026, 10:37 AM