public-url-hosting

Fail

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The instruction to install the box CLI via 'curl -fsSL https://box.ascii.dev/install | sh' downloads and executes a remote shell script without verification.
  • [COMMAND_EXECUTION]: The skill uses shell commands to manage cloud instances and network configurations, such as creating new boxes, executing scripts via SSH ('box ssh'), and mapping ports to public URLs.
Recommendations
  • HIGH: Downloads and executes remote code from: https://box.ascii.dev/install - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Jun 13, 2026, 05:29 AM