bounded
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The documentation mentions an installation path using a shell script piped to the command line (
curl -fsSL https://get.bounded.sh/install.sh | sh). This is provided as an alternative for environments where Node.js is not present. - Evidence:
curl -fsSL https://get.bounded.sh/install.sh | shfound inSKILL.md. - Context: This is the official installer for the vendor's own platform, hosted on the vendor's domain.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation and use of the Bounded CLI and related software from official repositories and package registries.
- Evidence:
npm install -D @bounded-sh/cliandnpx skills add bounded-sh/skill -yare listed in the instructions. - Context: These resources originate from the vendor's infrastructure to support the skill's primary purpose.
Audit Metadata