complexa-setup
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute local scripts such as
preflight.sh,build_uv_env.sh, anddownload_startup.sh, as well as thecomplexaCLI tool. These executions are intended for environment verification, dependency installation, and model management within the project workspace. - [EXTERNAL_DOWNLOADS]: Through the
complexa downloadcommand, the skill fetches large model weights from established and well-known services, including NVIDIA NGC, GitHub, Hugging Face, and AWS. These operations are necessary for obtaining the required checkpoints for protein design pipelines. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied directory paths for local code and data storage, interpolating these values into shell commands and the
.envfile. - Ingestion points: Path variables
LOCAL_CODE_PATHandLOCAL_DATA_PATHprovided by the user inSKILL.md. - Boundary markers: The skill does not use explicit boundary delimiters when interpolating these paths into commands.
- Capability inventory: The skill utilizes
Bashfor command execution andWritefor environment file modification. - Sanitization: There is no evidence of specific input validation or sanitization for the user-provided paths.
- [DYNAMIC_EXECUTION]: The skill dynamically generates a
run_manifest.jsonsetup artifact using a Python script and modifies the.envfile based on the user's choice of runtime (UV or Docker). These are standard configuration procedures for local project initialization.
Audit Metadata