jiekou-docs
Fail
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The file
references/integrations.mdcontains multiple instructions to download and execute remote shell scripts by pipingcurloutput directly intobashorsh. Targets include scripts fromastral.sh,opencode.ai, andopenclaw.ai. - [COMMAND_EXECUTION]: The documentation provides numerous shell commands for the user or agent to execute, including
npm install,docker compose,git clone, and variousuvorpipoperations across different files such asintegrations.mdandquick-start.md. - [DYNAMIC_EXECUTION]: In
references/integrations.md, there are instructions to dynamically generate a shell script (pcodex.sh) in the user's home directory and set it as executable usingchmod +x. - [INDIRECT_PROMPT_INJECTION]: The skill uses
WebFetchto dynamically ingest content from external Markdown files hosted on GitHub (raw.githubusercontent.com/jiekouai/jiekou-skills). - Ingestion points: External references for guides and FAQs in
SKILL.md. - Boundary markers: No specific delimiters or safety instructions are used to isolate the fetched content.
- Capability inventory: The skill has broad capabilities including command execution and network access.
- Sanitization: No sanitization is performed on the externally fetched documentation content.
Recommendations
- AI detected serious security threats
Audit Metadata