Skills
skills/next-space/flowus-skill/flowus-cli/Gen Agent Trust Hub

flowus-cli

Fail

Audited by Gen Agent Trust Hub on Jul 18, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads an installation script from https://cdn2.flowus.cn/flowus-cli/install and https://cdn2.flowus.cn/flowus-cli/install.ps1 to install the FlowUs CLI tool.
  • [REMOTE_CODE_EXECUTION]: The downloaded script is executed via bash or PowerShell to ensure the tool is available. This is the vendor's standard installation method.
  • [COMMAND_EXECUTION]: The agent is instructed to execute flowus CLI commands to perform API operations and manage authentication.
  • [PROMPT_INJECTION]: The skill retrieves external Markdown and JSON content, which presents an indirect prompt injection surface. Ingestion points: flowus markdown get, flowus block get, flowus database query, and flowus search. Boundary markers: No delimiters or warnings are used for retrieved data. Capability inventory: Shell command execution and file writing. Sanitization: No validation of retrieved content is performed.
Recommendations
  • HIGH: Downloads and executes remote code from: https://cdn2.flowus.cn/flowus-cli/install - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Jul 18, 2026, 09:42 AM
Security Audit — agent-trust-hub — flowus-cli