dashboard-toggle

Warn

Audited by Gen Agent Trust Hub on Feb 22, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS] (MEDIUM): The skill script manage_service.sh executes pnpm install, which downloads and installs dependencies from an external, non-trusted source repository.
  • [COMMAND_EXECUTION] (MEDIUM): The script executes node on a local file (dist/index.js) that is part of a third-party project, resulting in the execution of unverified external code.
  • [EXTERNAL_DOWNLOADS] (LOW): The script attempts to install the pnpm package manager globally using npm install -g pnpm if it is not detected on the system.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 22, 2026, 03:11 PM