nocobase-app-installer
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local and remote shell commands including
npx,pm2,ssh, andscpto automate the deployment and lifecycle management of applications. - [EXTERNAL_DOWNLOADS]: Downloads the
@nocobase/app-installerpackage and its dependencies from the official npm registry (registry.npmjs.org) usingnpx. - [REMOTE_CODE_EXECUTION]: Executes the downloaded installer script via
npxto perform installation, status checks, and upgrades. This is the primary intended behavior of the skill and involves vendor-owned packages. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data which could potentially contain malicious instructions.
- Ingestion points: Reads deployment archives (
.tar.gz), configuration files (installer.json), and environment definitions (app.env). - Boundary markers: Not explicitly implemented for the contents of the application archives, though the skill relies on the installer's internal logic.
- Capability inventory: Significant capabilities including local command execution and remote shell access via SSH.
- Sanitization: The installer performs SHA256 checksum verification on transferred bundles and application archives to ensure integrity during remote deployments.
Audit Metadata