ctx-serve
Warn
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The execution procedure involves generating and running temporary launch scripts to handle complex commands with special characters, which is a form of runtime script generation and execution.
- [COMMAND_EXECUTION]: The skill relies on shell commands including
tmux,lsof,kill, andcurlto manage service lifecycles and detect live status. It executes arbitrary commands defined within the project'sctx/services.mdmanifest. - [PRIVILEGE_ESCALATION]: The skill provides instructions to install the
tmuxutility using system package managers likeapt-getorbrewif it is missing, which typically requires administrative or root privileges. - [INDIRECT_PROMPT_INJECTION]: The skill reads and acts upon instructions (start commands and session names) stored in the
ctx/services.mdfile. If this file is modified by an external actor (e.g., via a malicious pull request), the agent may execute unintended commands. - Ingestion points:
ctx/services.mdmanifest file. - Boundary markers: The skill uses a structured Markdown table for the manifest, but does not specify explicit boundary markers or 'ignore' instructions for the content of the commands.
- Capability inventory: The skill has the capability to execute shell commands, manage background processes via
tmux/setsid, and terminate processes viakill/lsof. - Sanitization: The skill includes a specific security constraint to avoid shell interpolation by building argument arrays or using temporary launch scripts.
Audit Metadata