Confirm the source
Compare the repository, publisher, and installation command before continuing.
×
Third-party audit
High riskGen Agent Trust Hub
readme-optimization · samber/developer-relations-skills
Provider summary
The skill is designed to audit and optimize project README files but includes instructions that direct the agent to execute installation and usage commands found within untrusted project documentation. This creates a high risk of remote code execution, as a malicious repository could contain harmful commands that the agent would run to 'verify' the install path. The skill also processes untrusted user-provided content without sanitization, exposing it to indirect prompt injection, and includes several hallucinated academic references with future dates.
The provider classified the analyzed snapshot as HIGH risk. This result applies to the content available at audit time.
- Provider
- Gen Agent Trust Hub
- Normalized result
- fail
- Risk level
- HIGH
- Audited
- Sep 13, 2026
How to use this signal
Read the content
Review SKILL.md, scripts, and allowed tools. OpenAI Suite never executes them during indexing.
Limit permissions
Use the narrowest possible scope and avoid broad credentials for third-party skills.