setup
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill uses a curl-to-shell pipe to install Coder from the vendor's official domain (https://coder.com/install.sh). This is the canonical installation method for the product.
- [EXTERNAL_DOWNLOADS]: The skill fetches binaries from a well-known service (releases.hashicorp.com) and installs system packages via standard package managers (apt-get, dnf) during configuration and troubleshooting steps.
- [COMMAND_EXECUTION]: The skill executes various system discovery commands and service management tools, including those requiring elevated privileges (sudo iptables, sudo apt-get), to properly configure the environment.
- [CREDENTIALS_UNSAFE]: The skill manages sensitive data including API keys and session tokens. It implements security mitigations such as using read -s to avoid shell history exposure and setting restricted file permissions (0600) for stored credentials.
Audit Metadata