crabbox-quickstart
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Crabbox CLI tool from the developer's official GitHub releases page and via the vendor's Homebrew tap.
- [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands on the local machine for installation and readiness checks, and within disposable Docker or Podman containers for repository tasks and environment configuration.
- [INDIRECT_PROMPT_INJECTION]: The skill processes local repository data and executes scripts, which introduces an attack surface for instructions embedded in untrusted code.
- Ingestion points: Syncs the working directory of a Git repository into a container environment (SKILL.md).
- Boundary markers: None explicitly defined to prevent the agent from following instructions potentially embedded within the repository files.
- Capability inventory: The skill allows arbitrary command execution via
crabbox run -- <command>and supports script execution (e.g.,./run-tests.sh). - Sanitization: There are no documented sanitization or validation steps for the contents of the repository before they are synced and executed.
Audit Metadata