aeo-optimization
Warn
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The 'Companion check' section in
SKILL.mdinstructs the agent to execute a shell command (ls) on various local paths, including hidden directories in the user's home folder (e.g.,~/.claude/skills/). This instruction directs the agent to perform local file discovery to identify which other skills are installed on the system without an explicit user request for that action. - [EXTERNAL_DOWNLOADS]: The skill encourages the use of
npxto install additional components from the 'AbsolutelySkilled/AbsolutelySkilled' repository. This involves downloading and executing code from a third-party source that is not recognized as a trusted vendor, posing a potential supply chain risk.
Audit Metadata