mimo2codex-proxy
Fail
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides 'one-liner' installation commands that download and execute scripts from a third-party GitHub repository (7as0nch/mimo2codex) directly into the system shell (bash or PowerShell). This pattern bypasses manual verification of the code being executed.
- [COMMAND_EXECUTION]: The proxy documentation explicitly lists local_shell as a supported tool, which enables the execution of shell commands on the underlying host system.
- [PRIVILEGE_ESCALATION]: Instructions are provided to modify the PowerShell execution policy using Set-ExecutionPolicy, which reduces the system's protection against untrusted scripts.
- [EXTERNAL_DOWNLOADS]: The skill relies on external software components hosted on npm and GitHub repositories that are not associated with the stated author, posing a supply chain risk.
Recommendations
- HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/7as0nch/mimo2codex/main/scripts/install.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata