copier

Warn

Audited by Gen Agent Trust Hub on Aug 22, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The Copier tool supports _tasks and _migrations settings, which allow project templates to run arbitrary shell commands in the project directory. The documentation explicitly states that the --trust flag is required to enable this functionality, as it allows the execution of arbitrary shell logic.
  • [REMOTE_CODE_EXECUTION]: The skill demonstrates how to download and render project templates from remote Git repositories (e.g., GitHub, GitLab). These templates can include executable shell tasks and custom Jinja2 extensions that run in the local environment when the user provides the --trust flag.
  • [EXTERNAL_DOWNLOADS]: The instructions provide methods for installing the copier tool using pipx or uv and fetching template configuration and assets from remote URLs.
  • [PROMPT_INJECTION]: The skill documents a surface for indirect prompt injection where the agent processes external, potentially untrusted project templates. These templates contain Jinja2 rendering logic and shell tasks that can influence the agent's operations. The requirement for the --trust flag serves as a boundary marker for these higher-risk capabilities.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 22, 2026, 10:38 AM
Security Audit — agent-trust-hub — copier