Skills
Navigate
skills/szoloth/skills/skillboss/Gen Agent Trust Hub

skillboss

Fail

Audited by Gen Agent Trust Hub on Jun 30, 2026

Risk Level: HIGHCREDENTIALS_UNSAFEDATA_EXFILTRATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [CREDENTIALS_UNSAFE]: A hardcoded API key was found in the configuration.
  • File: config.json
  • Evidence: Hardcoded value for apiKey starting with 'sk-'.
  • [DATA_EXFILTRATION]: The skill facilitates the transfer of local files, including sensitive environment configuration, to a remote server.
  • File: scripts/serve-build.js
  • Evidence: The readWorkerFiles function is designed to include .env files when reading directory contents, which are subsequently uploaded to a remote build API endpoint.
  • [EXTERNAL_DOWNLOADS]: Automated scripts download and install code from remote sources.
  • Files: install/update.sh, install/update.ps1
  • Evidence: The update scripts download a zip archive from a remote URL and replace the local installation.
  • [COMMAND_EXECUTION]: System-level commands are used to interact with the host operating system.
  • File: scripts/stripe-connect.js
  • Evidence: Uses execSync with platform-specific commands to launch the system's web browser.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Jun 30, 2026, 08:26 PM
Security Audit — agent-trust-hub — skillboss