Confirm the source
Compare the repository, publisher, and installation command before continuing.
!
Third-party audit
ReviewGen Agent Trust Hub
oss-launch · samber/developer-relations-skills
Provider summary
The skill facilitates open-source project launches by providing structured checklists and strategy. However, it presents a security risk by instructing the agent to execute arbitrary code (installation commands) from untrusted target repositories to verify their readiness. It also lacks safeguards against indirect prompt injection from the repository content it audits.
The provider classified the analyzed snapshot as MEDIUM risk. This result applies to the content available at audit time.
- Provider
- Gen Agent Trust Hub
- Normalized result
- warn
- Risk level
- MEDIUM
- Audited
- Sep 13, 2026
How to use this signal
Read the content
Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.
Limit permissions
Use the narrowest possible scope and avoid broad credentials for third-party skills.