Skills
skills/shunsukehayashi/lark-harness/larc-onboarding/Gen Agent Trust Hub

larc-onboarding

Fail

Audited by Gen Agent Trust Hub on May 1, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill instructs the agent to execute code directly from the internet using the piped command curl -fsSL https://raw.githubusercontent.com/ShunsukeHayashi/lark-agent-runtime/main/scripts/install.sh | bash.
  • [EXTERNAL_DOWNLOADS]: The skill downloads external resources and installation scripts from the ShunsukeHayashi GitHub repository.
  • [COMMAND_EXECUTION]: The skill performs global system-level changes, including the installation of the @larksuite/cli Node.js package and the execution of a local shell script scripts/install-openclaw-larc-runtime-skill.sh provided with the skill.
Recommendations
  • HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/ShunsukeHayashi/lark-agent-runtime/main/scripts/install.sh - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
May 1, 2026, 10:36 AM