zx
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides extensive instructions and examples for executing arbitrary shell commands using the
$template literal,$.sync, and shell configuration options like$.shell,$.prefix, and$.postfix. These are the core features of the documented tool. - [REMOTE_CODE_EXECUTION]: The documentation in
references/cli.mddescribes a built-in feature ofzxthat allows users to download and execute remote scripts via HTTPS URLs (e.g.,zx https://...). The documentation includes a security warning advising users to only run scripts from trusted sources. - [EXTERNAL_DOWNLOADS]: The skill references external dependencies and network operations, including the use of
npm installfor library installation,fetch()for HTTP requests, and the--installCLI flag for automatic dependency resolution from npm registries.
Audit Metadata