airbyte
Fail
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Documentation for 'abctl' describes the installation process using a shell script fetched from a well-known official domain.
- [EXTERNAL_DOWNLOADS]: Fetches installation scripts and configuration files from official project repositories and domains associated with the platform.
- [COMMAND_EXECUTION]: Includes instructional code and commands for building and testing custom Python-based connectors, which involves generating and executing scripts within the local development environment.
- [PROMPT_INJECTION]: The skill facilitates the ingestion and analysis of external data, such as API responses and sync logs, which could serve as a vector for indirect prompt injection if the processed content contains adversarial instructions. 1. Ingestion points: Sync logs and API responses during connector development and monitoring. 2. Boundary markers: Absent from instructions for data processing. 3. Capability inventory: Execution of shell commands (abctl, helm, terraform, docker) and network requests (requests, curl). 4. Sanitization: Not explicitly implemented for the analysis of log content or API data.
Recommendations
- HIGH: Downloads and executes remote code from: https://get.airbyte.com - DO NOT USE without thorough review
Audit Metadata