authenticated-fetch
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches a setup script from the vendor's official GitHub repository.
- Evidence: Downloads from
https://raw.githubusercontent.com/FinpeakInc/frevana-cli-releases/refs/heads/main/skills/frevana/scripts/setup.shinscripts/setup.sh. - [REMOTE_CODE_EXECUTION]: Executes the vendor's setup script to configure the local environment.
- Evidence:
exec bash "$setup_file" "$@"inscripts/setup.sh. - [COMMAND_EXECUTION]: Runs local bash scripts and the
frevanaCLI tool to perform network operations. - Evidence: Calls to
bash <skill-path>/scripts/fetch_url.shand$FREVANA_BIN call frevana_fetchinscripts/fetch_url.sh. - [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection via external data ingestion.
- Ingestion points: The skill retrieves the raw response body from any user-provided URL through the
frevana_fetchtool. - Boundary markers: No explicit delimiters or instructions are used to separate fetched content from the agent's instructions.
- Capability inventory: The skill can execute local bash scripts, call system binaries, and write output to the local file system.
- Sanitization: Fetched external content is returned to the agent and user as-is, without escaping or validation.
Audit Metadata