material-design-3-ui
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The README documentation provides convenience installation commands that download and execute shell scripts directly from the vendor's repository via
curl | bash(Linux/macOS) andirm | iex(Windows). These commands are intended to facilitate the distribution of the skill package. - Evidence:
curl -fsSL https://raw.githubusercontent.com/skydashnet/material-design-3-ui-skill/main/install.sh | bashinREADME.md. - Evidence:
irm https://raw.githubusercontent.com/skydashnet/material-design-3-ui-skill/main/install.ps1 | iexinREADME.md. - [EXTERNAL_DOWNLOADS]: The installation scripts (
install.shandinstall.ps1) download the skill's components, including the core instructions and reference files, from the author's official GitHub repository. - Source:
https://raw.githubusercontent.com/skydashnet/material-design-3-ui-skill/. - Purpose: Automatic setup and updates of the design guideline files.
- [COMMAND_EXECUTION]: The provided scripts utilize standard system commands to manage files and directories within user home folders (e.g.,
~/.claude,~/.agents). - File Operations: The scripts use commands such as
mkdir,cp,ln -s, andrmto install the skill manifest and reference documents. - Security Controls: The scripts implement path validation via the
Assert-SafeRelativePathfunction to prevent directory traversal during the download and installation process.
Audit Metadata