space-chart-html
Fail
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill executes
npx getdesign@latest add <slug>to fetch design tokens. This pattern downloads and runs the latest version of an external package from the npm registry at runtime, creating a significant supply chain risk. - [COMMAND_EXECUTION]: The instruction
npx getdesign@latest add <slug>is vulnerable to command injection. Because the<slug>parameter is derived from user input (the brand name), an attacker could provide a malicious string containing shell metacharacters (e.g.,;,&&,|) to execute arbitrary commands on the host system. - [COMMAND_EXECUTION]: The skill uses the
opencommand to automatically launch a web browser to display the generated HTML file. This involves executing system-level commands to interact with the user's environment. - [EXTERNAL_DOWNLOADS]: The skill initiates external network requests to the npm registry via the
npxutility to download thegetdesigntool and associated brand data.
Recommendations
- AI detected serious security threats
Audit Metadata