device-testing
Fail
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- Remote Code Execution (CRITICAL): The skill uses a highly dangerous pattern
curl -Ls "https://get.maestro.mobile.dev" | bashwhich downloads and executes an unverified script directly in the shell. - External Downloads (CRITICAL): The source URL
https://get.maestro.mobile.devis explicitly flagged as a malicious Botnet domain by automated scanners. - Command Execution (HIGH): The execution of remote content via shell piping bypasses standard security reviews and provides the remote source with the same privileges as the user running the agent.
Recommendations
- HIGH: Downloads and executes remote code from: https://get.maestro.mobile.dev - DO NOT USE without thorough review
- AI detected serious security threats
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata