buildin-cli
Fail
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the agent to install the Buildin CLI by downloading a script from
https://cdn.buildin.ai/buildin-cli/installand piping it directly intobash. A similar pattern is used for Windows PowerShell usingirm ... | iexathttps://cdn.buildin.ai/buildin-cli/install.ps1. - [COMMAND_EXECUTION]: The skill's primary function is to execute shell commands using the
buildinCLI to interact with the Buildin V2 API, manage files, and configure authentication. - [EXTERNAL_DOWNLOADS]: The skill performs network requests to download the CLI binary, installation scripts, and updates from
cdn.buildin.ai. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it retrieves and processes Markdown and JSON content from external Buildin API endpoints.
- Ingestion points: Data enters the context via commands like
buildin markdown get,buildin page get, andbuildin database queryfrom theapi.buildin.aiendpoint. - Boundary markers: No explicit boundary markers or delimiters are defined to isolate the processed external content from the agent's instructions.
- Capability inventory: The agent can execute various shell commands through the
buildinCLI, including data modification (put), file uploads, and search operations. - Sanitization: The instructions include behavioral guidelines to confirm IDs and file paths against user-authorized input, but there is no technical sanitization of the data retrieved from the API.
Recommendations
- HIGH: Downloads and executes remote code from: https://cdn.buildin.ai/buildin-cli/install - DO NOT USE without thorough review
Audit Metadata