bt-mcp-setup
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches an installation script from the Baota Panel official domain (download.bt.cn) to update the server environment.
- [COMMAND_EXECUTION]: The skill uses shell commands for downloading, verifying, and executing installation tasks on the server, including running a dedicated Python upgrade script.
- [PRIVILEGE_ESCALATION]: Installation and environment upgrade steps utilize sudo to perform high-privilege system modifications required for server management.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted user data by ingesting parameters like IP addresses and bearer tokens into configuration templates. Evidence includes: 1. Ingestion points: Template variables 'panel_public_ip', 'bearer_token', and 'mcp_instance_id' in SKILL.md. 2. Boundary markers: None present for user-supplied variables. 3. Capability inventory: sudo bash (SKILL.md) and file writing to agent configuration files (e.g., ~/.codex/config.toml). 4. Sanitization: While the skill instructions advise on desensitization, no programmatic validation logic is defined for interpolated variables.
Audit Metadata