skill-installer
Warn
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches content from remote GitHub repositories using ZIP downloads and git cloning. While it targets a specific repository by default, it allows for installation from any user-supplied repository URL.
- [COMMAND_EXECUTION]: The script uses subprocess calls to execute the 'git' command-line interface on the host system to perform repository operations like cloning and sparse-checkouts.
- [REMOTE_CODE_EXECUTION]: The installer places external scripts and markdown instructions into the agent's active skill directory. These components are executed by the agent upon restart, effectively enabling the execution of code retrieved from remote sources.
Audit Metadata