dioxus-guide
Fail
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The guide provides an installation command (
curl -sSL http://dioxus.dev/install.sh | sh) that pipes a script from a remote domain directly into a shell. This is a high-risk command execution pattern that allows for arbitrary remote code to run on the system. - [EXTERNAL_DOWNLOADS]: The skill fetches a setup script from the Dioxus project's domain. The use of the unencrypted
httpprotocol for downloading executable content is a security concern as it lacks transport layer protection and is susceptible to interception or modification. - [COMMAND_EXECUTION]: The skill contains various shell commands for project development, including serving and building applications, alongside the initial remote script installation command.
Recommendations
- HIGH: Downloads and executes remote code from: http://dioxus.dev/install.sh - DO NOT USE without thorough review
Audit Metadata