crabbox
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell and PowerShell commands to perform builds, tests, and environment setup.
- Executes
dotnet build,dotnet test, and repository-specific scripts like.\build.ps1and.\scripts\setup-dev.ps1. - Uses the
crabboxCLI (a tool from the vendor openclaw.ai) to run commands on remote hosts. - [PRIVILEGE_ESCALATION]: The skill instructs the agent to bypass PowerShell execution policies.
- Uses
powershell.exe -ExecutionPolicy Bypassto launch applications locally on remote hosts as specified in SKILL.md. - [DYNAMIC_EXECUTION]: The skill generates and executes PowerShell and Bash scripts dynamically at runtime.
- Employs here-doc patterns (
<<'POWERSHELL',<<'BASH') to pass multi-line scripts to thecrabbox run --script-stdincommand in SKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from the current repository checkout and executes it on remote infrastructure, creating a vector for instructions embedded in code to influence agent behavior.
- Ingestion points: Files within the current git checkout (SKILL.md).
- Boundary markers: Absent.
- Capability inventory: Execution of arbitrary PowerShell/Bash scripts via
crabbox runand local shells (SKILL.md). - Sanitization: Absent; while the skill warns users to review untrusted code before syncing, there is no automated sanitization of repository content.
Audit Metadata