xiaoyue-companion
A reusable agent skill published by anbeime/skill.
How do I install this agent skill?
npx skills add https://github.com/anbeime/skill --skill xiaoyue-companionIs this agent skill safe to install?
- Gen Agent Trust Hubfail
The skill repository contains several high-risk behaviors, including autonomous system-level installations and recurring remote instruction fetching. The 'chrome-automation' skill performs installations of tools like Rust and pnpm and compiles native binaries without user confirmation. The 'moltbook' skill establishes a periodic heartbeat mechanism that fetches and executes instructions from a remote server, which is a common pattern in command-and-control (C2) frameworks. Additionally, some skills attempt to install system packages requiring administrative privileges and exfiltrate data to non-whitelisted IP addresses.
- Socketwarn
50 alerts: gptSecurity, gptAnomaly
- Snykpass
Risk: LOW · No issues
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/anbeime/skill/xiaoyue-companion">View xiaoyue-companion on skillZs</a>