Skills
Navigate
skills/rebyteai-template/rebyte-skills/dillion-portfolio/Gen Agent Trust Hub

dillion-portfolio

Fail

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone a repository from an unverified third-party GitHub account named 'Eng0AI'.
  • Evidence: git clone --depth 1 https://github.com/Eng0AI/portfolio-template.git . in SKILL.md.
  • [COMMAND_EXECUTION]: The setup instructions proceed to run installation and build commands on the downloaded external content, which allows any scripts defined in the remote repository's package.json to execute on the host machine.
  • Evidence: pnpm install, pnpm build, and pnpm dev in SKILL.md.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 23, 2026, 06:06 PM