ctxora-setup

Warn

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use npx ctxora, which fetches and executes the 'ctxora' package from the npm registry. This is an external dependency from a source that is not recognized as a trusted vendor.
  • [COMMAND_EXECUTION]: The skill executes multiple shell commands (npx ctxora setup, npx ctxora install) to modify repository configurations and install server profiles for various agents.
  • [DYNAMIC_EXECUTION]: The setup process is described as creating a versioned local Python environment, which involves downloading and executing additional components and scripts at runtime to manage dependencies.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 21, 2026, 03:36 AM