content-creation
Fail
Audited by Gen Agent Trust Hub on Feb 13, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
================================================================================
🔴 VERDICT: HIGH
This skill contains a command that downloads and executes a script from an external GitHub repository (esmondo/berkarja) using curl | bash. This is a highly dangerous practice as the content of the script cannot be verified at analysis time and could contain arbitrary malicious code. The source repository is not part of the list of trusted GitHub organizations, therefore this finding is not downgraded.
Total Findings: 1
🔴 HIGH Findings: • Unverifiable Dependency / Command Execution
- SKILL.md Line 10:
curl -fsSL https://raw.githubusercontent.com/esmondo/berkarja/main/scripts/install.sh | bash
================================================================================
Recommendations
- AI detected serious security threats
Audit Metadata