!
Third-party audit

Gen Agent Trust Hub

learning-medusa · medusajs/medusa-agent-skills

Review
Provider summary

The skill consists of instructional documentation for a MedusaJS developer tutorial. It suggests the use of high-privilege system commands (sudo), package installations, and various build and migration scripts. These are standard for local development but are flagged because automated execution of such commands by an AI agent presents security risks.

The provider classified the analyzed snapshot as MEDIUM risk. This result applies to the content available at audit time.

Provider
Gen Agent Trust Hub
Normalized result
warn
Risk level
MEDIUM
Audited
Feb 17, 2026
Interpretation

How to use this signal

01

Confirm the source

Compare the repository, publisher, and installation command before continuing.

02

Read the content

Review SKILL.md, scripts, and allowed tools. Artificial Atlas never executes them during indexing.

03

Limit permissions

Use the narrowest possible scope and avoid broad credentials for third-party skills.