lazyweb-explain-flow
Fail
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructions include a command to run
curl -fsSL https://www.lazyweb.com/install.sh | bashif required tools are missing. This 'curl | bash' pattern is a high-risk security vulnerability that downloads and executes code from a remote server without verification or integrity checks, allowing for full system compromise. - [COMMAND_EXECUTION]: The skill explicitly requires the
Bashtool and defines shell commands to be executed for setup, facilitating the potential exploitation of the remote code execution vector. - [PROMPT_INJECTION]: The skill includes instructions to handle specific data strings from external tools (e.g.,
MCP_PRO_REQUIRED,locked_preview) that override normal agent behavior and terminal output. 1. Ingestion points: Data returned by MCP tools hosted atlazyweb.com. 2. Boundary markers: Absent; the agent is instructed to relay external messages verbatim. 3. Capability inventory: The skill utilizesBash,Read,Grep, andGlobtools. 4. Sanitization: Absent; the instructions demand the agent stop and relay remote content without filtering or validation, allowing the external service to control the agent's narrative flow.
Recommendations
- HIGH: Downloads and executes remote code from: https://www.lazyweb.com/install.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata