openstoryline-install
Warn
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructs the agent to use
sudo apt-get installto install system-level packages includingffmpeg,wget, andunzipon Debian/Ubuntu systems. - [EXTERNAL_DOWNLOADS]: The workflow involves running a repository script (
download.sh) which fetches large external binary resources, specifically model weights and assets, from remote servers. - [COMMAND_EXECUTION]: The skill performs extensive shell command execution to manage Python environments (
venv,conda), install dependencies viapip, and launch long-running network services usinguvicornand custom Python modules. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The agent is directed to read the
README.mdandconfig.tomlfiles from the local repository checkout to determine project state. - Boundary markers: The instructions lack boundary markers or warnings to disregard instructions embedded within these external files.
- Capability inventory: The skill possesses significant capabilities including
git clone,sudousage,pipinstallation, shell script execution, and the ability to start listening web servers. - Sanitization: Content from the ingested files is not sanitized or validated before being processed by the agent's context.
Audit Metadata