apiiro-setup
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes elevated privileges (
sudo) to perform system tasks, including installing RPM packages viayumand moving the downloaded binary to/usr/local/bin. It also runs several local CLI commands to verify authentication and probe available features. - [EXTERNAL_DOWNLOADS]: Downloads installation assets, including Linux binaries and RPM files, directly from the
apiiro/marketplacerepository on GitHub. These downloads are directed to the official infrastructure of the skill's author. - [REMOTE_CODE_EXECUTION]: Implements a setup flow that involves downloading a binary file from a remote source, applying execution permissions (
chmod +x), and then executing that binary as the primary CLI tool. - [COMMAND_EXECUTION]: Modifies the user's environment by updating
~/.claude/settings.jsonand appending shell script logic to existing local scripts. This logic is used to dynamically update the agent's status line based on local session data.
Audit Metadata