NYC

obsidian

Fail

Audited by Gen Agent Trust Hub on Feb 18, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • External Downloads (HIGH): A security scanner (URLite) detected a blacklisted malicious URL (ID: UR4EFAFDCAD26E3E52-0200) within the skill's file structure.
  • Remote Code Execution (HIGH): The malicious URL is located in 'Requirements.md'. Since requirements files are typically used to automate dependency installation, this represents a significant risk of silent remote code execution during the skill's setup or initialization phase.
Recommendations
  • AI detected serious security threats
  • Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
HIGH
Analyzed
Feb 18, 2026, 12:22 AM