copyparty

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill consists entirely of documentation for the Copyparty open-source file server project. All referenced resources and commands are part of the standard installation and administration of the tool.
  • [EXTERNAL_DOWNLOADS]: Provides installation instructions that involve downloading scripts and executables from the project's official GitHub repository.
  • Evidence: references/deployment.md references a setup script for a-Shell via curl -L https://github.com/9001/copyparty/raw/refs/heads/hovudstraum/contrib/setup-ashell.sh | sh and also links to copyparty-sfx.py on GitHub.
  • [REMOTE_CODE_EXECUTION]: Includes commands that download and immediately execute shell scripts or Python code from the project's remote repository.
  • Evidence: references/deployment.md contains the piped execution pattern curl -L [URL] | sh and instructions to run the downloaded copyparty-sfx.py with Python.
  • [COMMAND_EXECUTION]: Documents the server software's capabilities for triggering external scripts or system binaries via event hooks and custom metadata parser plugins.
  • Evidence: references/features-upload-media.md and references/volflags.md describe parameters like xau (after-upload hook) and mtp (metadata parser) for executing custom scripts on the host system.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 05:19 PM
Security Audit — agent-trust-hub — copyparty