copyparty
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill consists entirely of documentation for the Copyparty open-source file server project. All referenced resources and commands are part of the standard installation and administration of the tool.
- [EXTERNAL_DOWNLOADS]: Provides installation instructions that involve downloading scripts and executables from the project's official GitHub repository.
- Evidence:
references/deployment.mdreferences a setup script for a-Shell viacurl -L https://github.com/9001/copyparty/raw/refs/heads/hovudstraum/contrib/setup-ashell.sh | shand also links tocopyparty-sfx.pyon GitHub. - [REMOTE_CODE_EXECUTION]: Includes commands that download and immediately execute shell scripts or Python code from the project's remote repository.
- Evidence:
references/deployment.mdcontains the piped execution patterncurl -L [URL] | shand instructions to run the downloadedcopyparty-sfx.pywith Python. - [COMMAND_EXECUTION]: Documents the server software's capabilities for triggering external scripts or system binaries via event hooks and custom metadata parser plugins.
- Evidence:
references/features-upload-media.mdandreferences/volflags.mddescribe parameters likexau(after-upload hook) andmtp(metadata parser) for executing custom scripts on the host system.
Audit Metadata