tailadmin-nextjs
Fail
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include cloning a repository from
https://github.com/Eng0AI/tailadmin-nextjs-template.git. This source is an external third-party repository that is not associated with the skill author or a known trusted organization. - [COMMAND_EXECUTION]: The skill executes
pnpm install,pnpm build, andpnpm devon the cloned contents. This pattern of downloading code from an unverified external source and immediately running installation/build scripts allows for the execution of arbitrary code defined in the remote repository's package manifests and build configurations.
Recommendations
- AI detected serious security threats
Audit Metadata