ctxora-setup
Warn
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use
npx ctxora, which fetches and executes the 'ctxora' package from the npm registry. This is an external dependency from a source that is not recognized as a trusted vendor. - [COMMAND_EXECUTION]: The skill executes multiple shell commands (
npx ctxora setup,npx ctxora install) to modify repository configurations and install server profiles for various agents. - [DYNAMIC_EXECUTION]: The setup process is described as creating a versioned local Python environment, which involves downloading and executing additional components and scripts at runtime to manage dependencies.
Audit Metadata