higgsfield-soul-id
Fail
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill includes instructions to download and execute a shell script from a remote URL:
curl -fsSL https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh | sh. This execution pattern allows for arbitrary code to be run on the host system without prior inspection.\n- [EXTERNAL_DOWNLOADS]: The skill fetches installation scripts and configuration fromraw.githubusercontent.comusing a repository that is not identified as a trusted source.\n- [COMMAND_EXECUTION]: The skill uses theBashtool to perform system-level operations, including software installation and session management, which increases the potential impact of malicious instructions.
Recommendations
- HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/higgsfield-ai/cli/main/install.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata