package-doks-red
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The launcher script ('red') fetches core application logic and dependencies from the vendor's official GitHub repositories at runtime using hardcoded commit hashes.
- [REMOTE_CODE_EXECUTION]: The script installs and executes code downloaded from the vendor's GitHub organization ('github:getcolors/*') via Bun's package installation and dynamic import mechanisms.
- [DYNAMIC_EXECUTION]: The script dynamically resolves and imports modules from a generated cache directory ('~/.cache/package-doks-red') and supports overriding the library path via environment variables for development.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-controlled configuration in 'colors.yml' to perform sensitive infrastructure management tasks. 1. Ingestion points: 'colors.yml' file. 2. Boundary markers: None specified in the instructions for the agent. 3. Capability inventory: File system access ('.colors/'), cloud provider API interactions, and shell command execution. 4. Sanitization: Validation logic is not visible in the bootstrap script and resides in the downloaded library components.
Audit Metadata