dcc-cli-gateway
Fail
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill facilitates the execution of remote code from an untrusted third-party source.
- Evidence: Multiple files including 'SKILL.md', 'references/CLI_CHEATSHEET.md', and 'references/ZERO_INSTANCES_CLI.md' instruct the user or agent to run 'curl -fsSL https://raw.githubusercontent.com/loonghao/vx/main/install.sh | bash'. This executes a shell script directly from a non-vendor GitHub repository without local verification.
- [EXTERNAL_DOWNLOADS]: The skill downloads executable binaries from remote repositories during runtime.
- Evidence: The 'scripts/dcc_gateway.py' script contains an 'install_cli' function that uses 'urllib.request.urlretrieve' to fetch the 'dcc-mcp-cli' binary from 'https://github.com/dcc-mcp/dcc-mcp-core/releases'. While this is a vendor-owned resource, it involves the automated download and execution of opaque binaries.
- [COMMAND_EXECUTION]: The skill executes shell commands on the host system to interact with CLI tools and manage background processes.
- Evidence: Both 'scripts/dcc_gateway.py' and 'scripts/check_cli.py' use 'subprocess.run' to execute the 'dcc-mcp-cli' binary and manage gateway daemons, creating a significant attack surface if input is mishandled.
Recommendations
- HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/loonghao/vx/main/install.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata