midnight-environment-setup

Fail

Audited by Gen Agent Trust Hub on Jul 11, 2026

Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill downloads a shell script from an unverified GitHub organization and pipes it directly to the shell.
  • Evidence: curl --proto '=https' --tlsv1.2 -LsSf https://github.com/midnightntwrk/compact/releases/latest/download/compact-installer.sh | sh in Step 2.
  • This execution pattern allows an unverified remote source to execute arbitrary commands on the system with the same privileges as the agent environment.
  • [EXTERNAL_DOWNLOADS]: The skill initiates downloads of executable scripts and Docker images from third-party repositories that are not identified as trusted vendors.
  • Script Source: https://github.com/midnightntwrk/compact/releases/latest/download/compact-installer.sh.
  • Docker Source: midnightntwrk/proof-server:latest is pulled and executed via docker run.
  • [COMMAND_EXECUTION]: The skill executes multiple shell commands to inspect and modify the host environment.
  • Performs environment detection using uname -a, which compact, and echo $SHELL.
  • Modifies shell profiles (~/.zshrc, ~/.bashrc) and the system PATH variable, creating permanent changes to the user's shell environment.
  • Automates the execution of the compact binary for updates and manages background services via Docker.
Recommendations
  • HIGH: Downloads and executes remote code from: https://github.com/midnightntwrk/compact/releases/latest/download/compact-installer.sh - DO NOT USE without thorough review
  • AI detected serious security threats
Audit Metadata
Risk Level
CRITICAL
Analyzed
Jul 11, 2026, 09:05 AM
Security Audit — agent-trust-hub — midnight-environment-setup