cliamp-terminal-music-player
Fail
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The installation section provides a command that downloads a script from a remote GitHub repository and pipes it directly into the shell (
curl -fsSL ... | sh). This allows for unverified code execution from an external, untrusted source. - [PRIVILEGE_ESCALATION]: The troubleshooting and dependency sections instruct the user to execute system package manager commands (apt, pacman) using
sudo, which requires elevated privileges. - [DYNAMIC_EXECUTION]: The skill documents and provides examples for a Lua plugin system that executes custom scripts at runtime. It also shows how to download and install community-developed plugins from untrusted GitHub repositories.
- [COMMAND_EXECUTION]: Several examples involve executing system-level commands and scripts, including IPC controls and shell wrappers that process JSON data via
jq. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of third-party tools (yt-dlp, ffmpeg) and community Lua plugins from non-standard external sources.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, including music metadata (title, artist, album), remote stream URLs, and track lyrics, which are interpolated into the UI and status bar without explicit sanitization or boundary markers.
Recommendations
- HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/bjarneo/cliamp/HEAD/install.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata