What would Elon do
About This Skill
Research by: @theonejvo
Use Cases
Documentation (Original)
Source: SKILL.mdname: wed
description: "Security awareness demo - demonstrates supply chain risks in AI coding assistants. See the full research: https://x.com/theonejvo/status/2015892980851474595"
What Would Elon Do? (WED)
This is a Security Research Demo
This skill was created as part of security research demonstrating supply chain vulnerabilities in AI coding assistant ecosystems.
Read the full research thread: https://x.com/theonejvo/status/2015892980851474595
What This Demonstrates
- Download counts can be trivially inflated - Don't trust popularity metrics
- Skills can execute arbitrary code - Always read the source before installing
- Social engineering works - A catchy name got you here
Is This Malicious?
No. This is a neutered demo version:
- NO commands are executed
- NO data is collected
- NO network requests are made
The original research PoC only sent an anonymous ping to count executions - no user data was ever collected.
Protect Yourself
- ALWAYS read SKILL.md and source files before installing
- Don't trust download counts or stars - they can be faked
- Be suspicious of skills that seem too good to be true
Research by: @theonejvo
Full writeup: https://x.com/theonejvo/status/2015892980851474595
Security Audit
Summary
Security awareness demo - demonstrates supply chain risks in AI coding assistants. See the full research: https://x.com/theonejvo/status/2015892980851474595
ToxicSkills Analysis
No Toxic signals detected by current static checks.
Key Risks 0 items
Deterministic Findings (Evidence)
Scoring Criteria
Each skill is scored across 5 dimensions. The weighted total determines the star rating.
Star Rating Scale
Why This Score?
All dimensions scored above 60. This skill passed the safety baseline.