chunk-sidecar-setup
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the CircleCI CLI installation script from the official CircleCI-Public GitHub repository.
- [REMOTE_CODE_EXECUTION]: Executes the downloaded installation script on the remote sidecar via a pipe to bash.
- [COMMAND_EXECUTION]: Performs various local and remote operations using the chunk CLI to manage sidecar lifecycles, file synchronization, and environment validation.
- [PRIVILEGE_ESCALATION]: Uses sudo to install the CircleCI CLI on the remote sidecar container.
- [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: Reads local configuration from .chunk/config.json and processes tool outputs from auth and validation commands. 2. Boundary markers: The instructions lack explicit delimitation for tool outputs. 3. Capability inventory: Includes local shell access, sidecar configuration via the chunk CLI, and arbitrary remote command execution on sidecars. 4. Sanitization: Uses interactive AskUserQuestion blocks to ensure user confirmation for major setup steps.
Audit Metadata