copier
Warn
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The Copier tool supports
_tasksand_migrationssettings, which allow project templates to run arbitrary shell commands in the project directory. The documentation explicitly states that the--trustflag is required to enable this functionality, as it allows the execution of arbitrary shell logic. - [REMOTE_CODE_EXECUTION]: The skill demonstrates how to download and render project templates from remote Git repositories (e.g., GitHub, GitLab). These templates can include executable shell tasks and custom Jinja2 extensions that run in the local environment when the user provides the
--trustflag. - [EXTERNAL_DOWNLOADS]: The instructions provide methods for installing the
copiertool usingpipxoruvand fetching template configuration and assets from remote URLs. - [PROMPT_INJECTION]: The skill documents a surface for indirect prompt injection where the agent processes external, potentially untrusted project templates. These templates contain Jinja2 rendering logic and shell tasks that can influence the agent's operations. The requirement for the
--trustflag serves as a boundary marker for these higher-risk capabilities.
Audit Metadata