asdf
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation provides instructions to download the
asdfbinary and various tool plugins from official and community GitHub repositories (e.g.,github.com/asdf-vm/asdf). - [REMOTE_CODE_EXECUTION]: The skill documents the
asdfplugin architecture, which functions by executing arbitrary shell scripts (e.g.,bin/install,bin/download) from remote Git repositories. The skill explicitly warns users to treat new plugins with the same caution ascurl | bashscripts. - [COMMAND_EXECUTION]: The skill facilitates version management by providing standardized shell commands for installing, pinning, and executing CLI tools.
- [PRIVILEGE_ESCALATION]: Setup instructions include the use of
sudoto install theasdfbinary into protected system directories like/usr/local/bin. - [PERSISTENCE]: The skill provides instructions for modifying shell configuration files (e.g.,
~/.bashrc,~/.zshrc,~/.profile) to persistently add theasdfshims directory to the systemPATH. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill interacts with
.tool-versionsfiles found in repository roots to resolve tool names and versions. - Boundary markers: No specific boundary markers or instruction-ignore delimiters are documented for these files.
- Capability inventory: The toolset includes network operations (
curl,git), file writes, and subprocess execution. - Sanitization: There is no mention of sanitizing or validating the contents of
.tool-versionsfiles before they are processed byasdf. - [DYNAMIC_EXECUTION]: The documentation includes patterns for dynamically generating and running commands, such as using
xargsto add plugins based on the contents of a.tool-versionsfile.
Audit Metadata