crabbox-quickstart

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Crabbox CLI tool from the developer's official GitHub releases page and via the vendor's Homebrew tap.
  • [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands on the local machine for installation and readiness checks, and within disposable Docker or Podman containers for repository tasks and environment configuration.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes local repository data and executes scripts, which introduces an attack surface for instructions embedded in untrusted code.
  • Ingestion points: Syncs the working directory of a Git repository into a container environment (SKILL.md).
  • Boundary markers: None explicitly defined to prevent the agent from following instructions potentially embedded within the repository files.
  • Capability inventory: The skill allows arbitrary command execution via crabbox run -- <command> and supports script execution (e.g., ./run-tests.sh).
  • Sanitization: There are no documented sanitization or validation steps for the contents of the repository before they are synced and executed.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 11:50 PM