fastcopy-file-transfer-optimization
Warn
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading a binary from a placeholder external domain (example.com) for installation.
- [REMOTE_CODE_EXECUTION]: The installation procedure for Linux utilizes a download, chmod, and execute pattern for external binaries.
- [COMMAND_EXECUTION]: The documentation includes multiple examples using sudo for administrative tasks like moving binaries to system folders and accessing protected files.
- [COMMAND_EXECUTION]: The utility supports shell-based hooks (on_start, on_complete, on_error) which allow for the execution of arbitrary commands during operations.
- [PROMPT_INJECTION]: AI integration examples exhibit an indirect prompt injection surface. 1. Ingestion points: filenames are interpolated into LLM prompts (e.g., {filename}). 2. Boundary markers: None present. 3. Capability inventory: Command execution via hooks and CLI. 4. Sanitization: No sanitization or validation of filenames is described.
Audit Metadata