agent-sandbox
Fail
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructions promote installing the
boxutility using a direct shell-piped execution pattern:curl -fsSL https://box.ascii.dev/install | sh. This method executes code from a remote server without verification. - [EXTERNAL_DOWNLOADS]: The skill relies on software and services hosted at
box.ascii.dev, which is an external domain not belonging to the list of trusted vendors or well-known services. - [COMMAND_EXECUTION]: The skill provides examples for executing shell scripts and commands on remote instances, such as
box ssh "$box_id" -- bash -s < ./agent-setup.sh, which allows for arbitrary code execution within the managed VM environment.
Recommendations
- HIGH: Downloads and executes remote code from: https://box.ascii.dev/install - DO NOT USE without thorough review
Audit Metadata