reason-machines/devtools-skills223 installs
cliamp-terminal-music-player
A reusable agent skill published by reason-machines/devtools-skills.
How do I install this agent skill?
npx skills add https://github.com/reason-machines/devtools-skills --skill cliamp-terminal-music-playerIs this agent skill safe to install?
- Gen Agent Trust Hubfail
This skill contains high-risk installation instructions that download and execute a script directly from an unverified GitHub repository using the 'curl | sh' pattern. This method allows for arbitrary code execution on the user's machine. Additionally, it encourages the use of unverified third-party plugins which are executed dynamically and can perform network requests while processing untrusted audio metadata.
- Socketpass
No alerts
- Snykwarn
Risk: MEDIUM · 1 issue
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/reason-machines/devtools-skills/cliamp-terminal-music-player">View cliamp-terminal-music-player on skillZs</a>