init
Fail
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill uses a highly dangerous pattern to install software by downloading a remote shell script and piping it directly into the bash interpreter.
- Evidence:
curl -fsSL https://raw.githubusercontent.com/7xuanlu/origin/v0.6.1/install.sh | bashinSKILL.md.- [EXTERNAL_DOWNLOADS]: The skill downloads code from a GitHub account (7xuanlu) that is not associated with a recognized trusted vendor or well-known service.- [COMMAND_EXECUTION]: The skill executes various system commands to modify the environment and manage background processes. - Modifies the system
PATHusingexport PATH="$HOME/.origin/bin:$PATH". - Uses
origin installto create alaunchdpersistence item and start a background daemon.
Recommendations
- HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/7xuanlu/origin/v0.6.1/install.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata