Skills
Navigate
skills/wbh604/uzi-skill/deep-analysis/Gen Agent Trust Hub

deep-analysis

Fail

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: CRITICALEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The data source registry (scripts/lib/data_source_registry.py) includes a URL (https://www.99qh.com/) flagged as phishing by automated scanners.
  • [REMOTE_CODE_EXECUTION]: The script run.py performs remote script execution by piping the output of a curl command into bash to install the cloudflared utility from an external repository.
  • [PRIVILEGE_ESCALATION]: The run.py script uses sudo to move a downloaded executable into a system directory (/usr/local/bin/), which is a high-risk privilege escalation pattern.
  • [DYNAMIC_EXECUTION]: The module scripts/lib/net_timeout_guard.py monkey-patches the requests.Session.request method at runtime to enforce global timeouts, modifying the behavior of a standard library.
  • [COMMAND_EXECUTION]: Multiple scripts, including run.py and scripts/lib/playwright_fallback.py, use subprocess.run to execute shell commands like pip install and playwright install during runtime.
  • [DATA_EXFILTRATION]: The run.py script includes functionality to create a Cloudflare Tunnel, which can expose local network services to the public internet, potentially creating a channel for unauthorized remote access or data exposure.
Recommendations
  • CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
  • AI detected serious security threats
  • Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Nov 4, 2026, 07:22 AM