krypton-vps-codex-app
Warn
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various shell commands on both the local machine and the remote VPS to audit system status, install software packages, and manage git repositories.
- [EXTERNAL_DOWNLOADS]: The instructions guide the agent to download and install numerous development tools and platforms from external official sources to provision the remote VPS environment.
- [DATA_EXFILTRATION]: The skill reads the local
~/.ssh/configfile to retrieve and display host configuration details such as hostnames and identity file paths. It also facilitates the transfer of local project configuration files, which may contain sensitive environment variables and credentials, to the remote host. - [PROMPT_INJECTION]: The skill reads and displays the contents of repository files like
README.mdandAGENTS.mdfrom the remote host. These untrusted files represent an attack surface for indirect prompt injection, where malicious instructions embedded in project documentation could influence the agent's actions. Ingestion points: remote project documentation (README.md, AGENTS.md) and git status command output. Boundary markers: none identified in the instructions or scripts. Capability inventory: local and remote shell execution, file system access, and package installation capabilities. Sanitization: content from external files is processed and displayed without specific filtering or validation of the text content.
Audit Metadata