background-worker
Fail
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill requires the execution of a shell script directly from a URL (https://box.ascii.dev/install) piped into 'sh'. This pattern is a critical security risk as it allows the remote server to execute any command on the user's system without verification.
- [COMMAND_EXECUTION]: The skill uses shell commands to interact with the 'box' CLI, including provisioning cloud resources and executing remote commands on those resources over SSH.
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs software from a third-party domain (box.ascii.dev) that is not recognized as a trusted organization or well-known service.
Recommendations
- HIGH: Downloads and executes remote code from: https://box.ascii.dev/install - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata