midnight-environment-setup
Fail
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill downloads a shell script from an unverified GitHub organization and pipes it directly to the shell.
- Evidence:
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/midnightntwrk/compact/releases/latest/download/compact-installer.sh | shin Step 2. - This execution pattern allows an unverified remote source to execute arbitrary commands on the system with the same privileges as the agent environment.
- [EXTERNAL_DOWNLOADS]: The skill initiates downloads of executable scripts and Docker images from third-party repositories that are not identified as trusted vendors.
- Script Source:
https://github.com/midnightntwrk/compact/releases/latest/download/compact-installer.sh. - Docker Source:
midnightntwrk/proof-server:latestis pulled and executed viadocker run. - [COMMAND_EXECUTION]: The skill executes multiple shell commands to inspect and modify the host environment.
- Performs environment detection using
uname -a,which compact, andecho $SHELL. - Modifies shell profiles (
~/.zshrc,~/.bashrc) and the systemPATHvariable, creating permanent changes to the user's shell environment. - Automates the execution of the
compactbinary for updates and manages background services via Docker.
Recommendations
- HIGH: Downloads and executes remote code from: https://github.com/midnightntwrk/compact/releases/latest/download/compact-installer.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata