se-dev-server-code
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The setup scripts Prepare.bat and prepare.sh download the uv package manager from astral.sh and the busybox.exe utility from frippery.org. These are reputable sources for the required development tools.
- [REMOTE_CODE_EXECUTION]: The preparation scripts use a piped execution pattern (e.g., curl | sh) to install the uv tool from astral.sh, which is a well-known service in the developer community.
- [COMMAND_EXECUTION]: Python scripts such as check_version.py and test_search_code.py use subprocess.run to execute command-line utilities like ilspycmd, git, and search tools for local operations.
- [INDIRECT_PROMPT_INJECTION]: The skill provides access to decompiled C# code which is untrusted data. Ingestion points: Reads source code from the Data/Decompiled/ directory. Boundary markers: Absent in search results provided to the agent context. Capability inventory: Can execute bash commands via specific skill scripts. Sanitization: Uses regex processing and structured CSV indexing.
Audit Metadata