sem-integration
Fail
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the
sembinary from a third-party GitHub repository (github.com/Ataraxy-Labs/sem) that is not recognized as a trusted organization. - [REMOTE_CODE_EXECUTION]: The installation pattern for Linux systems involves fetching a pre-compiled binary from a remote URL (
https://github.com/Ataraxy-Labs/sem/releases/latest/download/sem-x86_64-unknown-linux-gnu) and preparing it for direct execution on the local system. - [COMMAND_EXECUTION]: The skill guides the agent to offer installation of external software packages through package managers like
cargo(cargo install --locked sem-cli) andbrew(brew install sem-cli). - [PRIVILEGE_ESCALATION]: The provided installation commands for the downloaded Linux binary include the use of
chmod +xto grant execution privileges to the external file.
Recommendations
- AI detected serious security threats
Audit Metadata