cabinet-ai-knowledge-base
Warn
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent and user to download and install software from external sources.
- Fetches the project repository from
https://github.com/hilash/cabinet.gitusinggit clone. - Installs the
@anthropic-ai/claude-codeCLI globally vianpm. - [REMOTE_CODE_EXECUTION]: The installation process utilizes
npx create-cabinet@latest, which downloads and executes a bootstrapper package from the NPM registry at runtime. - [COMMAND_EXECUTION]: The skill documents a 'Web Terminal' feature that provides full shell access.
- Powered by
xterm.jsandnode-pty, this feature allows the execution of arbitrary shell commands within the browser. - The
cabinet-daemon.tsautomatically executes agent prompts through theclaudeCLI on a cron schedule. - [DYNAMIC_EXECUTION]: The skill features 'Embedded HTML Apps' that automatically render
index.htmlfiles found in the data directory. - These files are rendered as iframes, allowing for the execution of arbitrary client-side JavaScript within the application context.
- [INDIRECT_PROMPT_INJECTION]: The skill processes markdown and HTML files stored in the
data/directory, creating a surface for indirect instructions to be processed by agents. - Ingestion points: Markdown files (
.md) and HTML files (.html) in thedata/directory are read and processed by the system (SKILL.md). - Boundary markers: None explicitly defined to separate data from instructions during agent processing.
- Capability inventory: The system includes a background daemon that executes agent prompts, a web terminal with shell access, and file-writing capabilities (SKILL.md).
- Sanitization: Not documented; the system executes shell commands via a terminal and renders local HTML files in iframes.
Audit Metadata