trivy
Fail
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: Fetches and executes an installation script from the official Aqua Security GitHub repository via 'curl | sh'.
- [PRIVILEGE_ESCALATION]: Installation steps for Debian/Ubuntu and RHEL systems involve using 'sudo' to acquire administrative privileges for package installation, repository configuration, and file system modifications (SKILL.md).
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources, creating a surface for indirect prompt injection attacks. 1. Ingestion points: The 'trivy image', 'trivy fs', 'trivy repo', and 'trivy k8s' commands ingest content from external registries, local files, and remote repositories (SKILL.md). 2. Boundary markers: The instructions lack explicit boundary markers or directives for the agent to ignore instructions embedded within scanned files. 3. Capability inventory: The skill requires the 'Bash' tool to execute shell commands and scan the file system (SKILL.md). 4. Sanitization: No sanitization or filtering of scan results is performed before agent processing.
- [EXTERNAL_DOWNLOADS]: Fetches official security keys and binary releases from domains associated with Aqua Security (aquasecurity.github.io, github.com/aquasecurity).
Recommendations
- HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh - DO NOT USE without thorough review
Audit Metadata