Skills
Navigate
skills/jwynia/agent-skills/devcontainer/Gen Agent Trust Hub

devcontainer

Fail

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The script scripts/scan-image.ts contains documentation and error messages referencing an installation command: curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh. This involves piping a script from Aqua Security's GitHub repository to a shell for tool installation.
  • [COMMAND_EXECUTION]: The scripts/scan-image.ts script executes the trivy binary using Deno.Command to perform vulnerability scans on container images. The script also requires network access permissions to download vulnerability databases.
  • [INDIRECT_PROMPT_INJECTION]: The skill's diagnostic scripts ingest data from local environment configuration files, presenting a surface for indirect prompt injection.
  • Ingestion points: The scripts scripts/analyze-devcontainer.ts and scripts/validate-dockerfile.ts read devcontainer.json and Dockerfile content respectively.
  • Boundary markers: No specific delimiters or instructions are used to separate user-provided file content from the script's analysis logic.
  • Capability inventory: The skill possesses the capability to execute system commands (trivy in scripts/scan-image.ts) and read local files.
  • Sanitization: The scripts parse and analyze file content without specific sanitization for embedded instructions that could target the AI agent.
Recommendations
  • HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 17, 2026, 01:07 PM
Security Audit — agent-trust-hub — devcontainer