astrowind

Warn

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill clones a template from an external, third-party GitHub repository.
  • Evidence: git clone --depth 1 https://github.com/Eng0AI/astrowind-template.git . in SKILL.md.
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands that interact with and install code from the external repository.
  • Evidence: npm install, npm run build, npm run dev, and deployment commands like vercel deploy and netlify deploy are documented for execution in SKILL.md. These commands execute scripts and install dependencies defined in the downloaded external repository.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 23, 2026, 06:06 PM