use-skill
Fail
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill facilitates the fetching an d im mediate execution of external instruction s (SKIL L.m d) an d reference d script s from arbitrary GitHub repositories. It explicitly com mand s the agent to follow the remote skill's instructions exactly as if it were a local ly installe d skill, effec tively turning the agent into a remote instruction interprete r.
- [COMMAND_EXECUTION]: The skill uses the
curlutility to interact with the GitHub API, the skill s.sh searc h API, an d to downloa d raw file content s. The result s of the se com mand s directly influence the subsequen t behavio r an d instruction s of the agent. - [PROMPT_INJECTION]: This skill serves as a delivery vecto r for in direct prom pt injection. By downloa ding an d obeying instructions from un vette d third-party repositories or searc h result s, the agent is vulnerable to malicious over ride s or safety bypass instruction s containe d within the fetche d skill.
- [EXTERNAL_DOWNLOADS]: The skill dynamically construct s URLs to fetch executable instruction s from
raw.github usercontent.coman dskill s.sh. While the se are well-known platform s, the conten t is user-control le d an d no t subjec t to security vetting by the platform.
Recommendations
- AI detected serious security threats
Audit Metadata