abox-local-files
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses a Python script (
scripts/install-adapter.py) to download theabox.toolsadapter and its SHA-256 checksum from theA-Box-of-Tools/abox-tools-pluginGitHub repository. - [REMOTE_CODE_EXECUTION]: The installer script downloads and executes a Node.js runtime and associated modules. It includes security features like integrity verification of the downloaded archive and validation of internal paths to prevent directory traversal or other installation-time exploits.
- [COMMAND_EXECUTION]: The skill interacts with the local file system by executing shell commands to run the adapter CLI (
abox.mjs). These commands are used to process files as requested by the user. - [INDIRECT_PROMPT_INJECTION]: The skill processes complex external file formats (PDF and SVG). It mitigates potential injection and parsing risks by enforcing strict limits on stream expansion and refusing files with active content, external resource references, or animations.
- [DYNAMIC_EXECUTION]: The skill executes code from a dynamically installed adapter. The installation is performed into a specific versioned directory within the user's home folder, and the runtime executable is verified against a known hash provided in the installation receipt.
Audit Metadata