se-dev-server-code
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
uvtool fromastral.shand theBusyBoxutility for Windows fromfrippery.orgduring the environment setup phase (Prepare.bat, prepare.sh). - [REMOTE_CODE_EXECUTION]: Preparation scripts pipe remote installer scripts from
astral.shdirectly into PowerShell (iex) or shell (sh) to install system-level dependencies. - [COMMAND_EXECUTION]: Custom Python scripts (
check_version.py,test_graphify_queries.py,test_search_code.py) utilizesubprocess.run()to execute local developer tools such asilspycmdandgit. The setup batch script also utilizesSet-ExecutionPolicy Bypassto facilitate tool installation. - [PROMPT_INJECTION]: The skill processes decompiled C# source code and XML content files, presenting an indirect prompt injection surface. The current implementation lack specific boundary markers or content sanitization to prevent the agent from accidentally interpreting instructions embedded within these files.
Audit Metadata