skills/nodeops-app/skills/asdf/Gen Agent Trust Hub

asdf

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The documentation provides instructions to download the asdf binary and various tool plugins from official and community GitHub repositories (e.g., github.com/asdf-vm/asdf).
  • [REMOTE_CODE_EXECUTION]: The skill documents the asdf plugin architecture, which functions by executing arbitrary shell scripts (e.g., bin/install, bin/download) from remote Git repositories. The skill explicitly warns users to treat new plugins with the same caution as curl | bash scripts.
  • [COMMAND_EXECUTION]: The skill facilitates version management by providing standardized shell commands for installing, pinning, and executing CLI tools.
  • [PRIVILEGE_ESCALATION]: Setup instructions include the use of sudo to install the asdf binary into protected system directories like /usr/local/bin.
  • [PERSISTENCE]: The skill provides instructions for modifying shell configuration files (e.g., ~/.bashrc, ~/.zshrc, ~/.profile) to persistently add the asdf shims directory to the system PATH.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill interacts with .tool-versions files found in repository roots to resolve tool names and versions.
  • Boundary markers: No specific boundary markers or instruction-ignore delimiters are documented for these files.
  • Capability inventory: The toolset includes network operations (curl, git), file writes, and subprocess execution.
  • Sanitization: There is no mention of sanitizing or validating the contents of .tool-versions files before they are processed by asdf.
  • [DYNAMIC_EXECUTION]: The documentation includes patterns for dynamically generating and running commands, such as using xargs to add plugins based on the contents of a .tool-versions file.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 06:06 PM