acidrain-security-script-hub
Warn
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download code from an external, unverifiable GitHub repository.
- Evidence: git clone https://github.com/henry-lewiskpp1107/acidrain-security-script-hub.git.
- [COMMAND_EXECUTION]: The instructions include shell commands for environment setup, including modifying file permissions and starting a local server.
- Evidence: chmod +x scripts/php/*.php, chmod 755 scripts/, and php -S localhost:8000.
- [REMOTE_CODE_EXECUTION]: By facilitating the download and execution of external scripts, the skill creates a path for remote code execution from a third-party source.
- [PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it is designed to ingest and process data from external, potentially attacker-controlled websites for security analysis.
- Ingestion points: testEndpoint(url, params) and checkCSP(url) functions in SKILL.md.
- Boundary markers: Absent; there are no instructions to the agent to ignore embedded instructions in the targets.
- Capability inventory: The skill utilizes fetch for network requests and shell commands for repository setup and local server execution.
- Sanitization: While sanitization examples are provided, the inclusion of intentionally vulnerable endpoints increases the risk of exploitation if misused.
Audit Metadata