frankenphp
Fail
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The documentation suggests installing the server by piping a remote script from
https://frankenphp.dev/install.shdirectly into the shell, a method vulnerable to source compromise. - [EXTERNAL_DOWNLOADS]: The skill refers to downloading and executing scripts and binaries from external domains.
- [PRIVILEGE_ESCALATION]: The instructions involve moving files into system-wide executable paths like
/usr/local/bin/, which requires elevated permissions. - [COMMAND_EXECUTION]: The skill provides numerous commands for system interaction, including Docker management with host volume mounting and binary execution.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes user-supplied application scripts and server configurations. Ingestion points: User-provided PHP files and Caddyfile configurations. Boundary markers: Absent. Capability inventory: System-level command execution and binary manipulation. Sanitization: None provided.
Recommendations
- HIGH: Downloads and executes remote code from: https://frankenphp.dev/install.sh - DO NOT USE without thorough review
Audit Metadata