setup
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the official installation script from the vendor's domain (coder.com) to perform the software installation.
- [COMMAND_EXECUTION]: Executes administrative commands to manage system packages, supervisor services, and deployment configurations.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied configuration data and API keys (ingestion points in SKILL.md and references/coder-agents.md). Boundary markers are implemented by passing data via environment variables rather than direct string interpolation. The capability inventory includes curl, shell execution, and administrative package management. Sanitization is performed using the shlex.quote library in the provided scripts to prevent command injection.
Audit Metadata