puda
Warn
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: Downloads the PUDA CLI binary from the vendor's GitHub releases page during setup.
- [REMOTE_CODE_EXECUTION]: Employs a modular 'skills' system where the CLI installs and updates additional agent capabilities from the PUDA ecosystem.
- [PRIVILEGE_ESCALATION]: Executes system configuration scripts requiring root access (via sudo) or Administrator privileges (using PowerShell -ExecutionPolicy Bypass) to synchronize host clocks.
- [COMMAND_EXECUTION]: Uses privileged commands to install the 'chrony' package and manipulate system services like w32time and timedatectl.
- [INDIRECT_PROMPT_INJECTION]: Treats external state files (project.md) and machine logs as single sources of truth, which are susceptible to instruction injection as they are processed without boundary markers or sanitization.
- [EXTERNAL_DOWNLOADS]: Fetches dependencies such as python3, pip, and npx, and clones the livestreaming stack from GitHub.
Audit Metadata