skills/ruvnet/ruflo/worker-benchmarks/Gen Agent Trust Hub

worker-benchmarks

Warn

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation instructs the user to execute npx agentic-flow, which triggers a download of the agentic-flow package from the public NPM registry.
  • [REMOTE_CODE_EXECUTION]: The use of npx allows for the immediate execution of remote code. The source package agentic-flow is not associated with a known trusted organization, posing a risk if the package is compromised.
  • [COMMAND_EXECUTION]: The skill provides several shell commands for the agent to perform benchmarking operations, including npx agentic-flow workers benchmark with various sub-types such as trigger-detection and agent-selection.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 15, 2026, 11:38 AM