code-execution
Fail
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The 'Prereqs' section provides a command to download and immediately execute a script from a remote server:
curl -fsSL https://box.ascii.dev/install | sh. This method provides no opportunity for the user or agent to inspect the script for malicious content before execution, allowing for arbitrary code execution on the host machine. - [EXTERNAL_DOWNLOADS]: The skill fetches resources from
https://box.ascii.dev, which is an external domain not associated with the author's verified infrastructure or known trusted service providers. - [COMMAND_EXECUTION]: The skill utilizes the shell to execute various commands for the 'box' CLI, including
box login,box new, andbox ssh. These commands interact with remote infrastructure and manage local execution environments.
Recommendations
- HIGH: Downloads and executes remote code from: https://box.ascii.dev/install - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata