package-clickstack-red
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The red launcher fetches its core library and dependencies from the vendor's GitHub repositories (github:getcolors/clickstack and github:getcolors/once) during initialization.
- [REMOTE_CODE_EXECUTION]: The skill implements a bootstrap mechanism that installs and executes remote code from the pinned GitHub commits via the Bun runtime.
- [DYNAMIC_EXECUTION]: The launcher uses dynamic import() to load the package-clickstack-red module from a computed path within the user's cache directory after installation.
- [COMMAND_EXECUTION]: The skill facilitates infrastructure management through shell commands, including red build, red create, and the automated use of bun install for dependency management.
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its ingestion of the colors.yml configuration file and COLORS_PAR_* environment variables.
- Ingestion points: Reads colors.yml and environment variables for deployment parameters.
- Boundary markers: None identified in the skill instructions.
- Capability inventory: The skill performs file system modifications (managing ~/.ssh/ and /etc/clickstack/), executes subprocesses via the red launcher, and initiates network operations targeting cloud provider APIs (Vultr, DigitalOcean, Cloudflare).
- Sanitization: No explicit sanitization or validation of the input configuration is described in the documentation.
Audit Metadata