edgeone-pages-website-skeleton

Fail

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: CRITICALMETADATA_POISONINGEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [METADATA_POISONING]: The skill's metadata and Quick Reference section include a demo URL https://geek-mall-demo-4qaxvmeh.edgeone.cool that has been explicitly flagged as malicious (Blacklist) by automated security scanners.
  • [EXTERNAL_DOWNLOADS]: The reference documentation (references/ai-chat-module.md) points users to a personal GitHub repository (https://github.com/liuboacean/website-skeleton-skill) for critical security implementation details, specifically session ownership verification. This differs from the official organizational repositories and creates a supply chain risk.
  • [COMMAND_EXECUTION]: The skill provides instructions for the global installation of CLI tools (npm install -g edgeone) and the execution of commands that handle authentication and deployment (edgeone login, edgeone pages deploy), which require significant system-level permissions and interact with cloud resources.
Recommendations
  • AI detected serious security threats
  • Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Sep 22, 2026, 08:46 AM