quien-whois-lookup
Fail
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends downloading an installation script from an external, untrusted source (apt.quien.dev).
- [REMOTE_CODE_EXECUTION]: The installation instructions promote the dangerous practice of piping a remote script directly into a shell (curl | sh).
- [PRIVILEGE_ESCALATION]: The recommended installation command uses sudo sh, which executes the untrusted remote script with root administrative privileges.
- [PERSISTENCE]: The skill instructs users to modify shell profiles such as ~/.bashrc and ~/.zshrc to create command aliases, which establishes a persistent modification of the user environment.
- [COMMAND_EXECUTION]: The skill and its included code examples demonstrate the execution of system commands using the quien tool with arguments that may come from untrusted user input.
- [INDIRECT_PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection due to the way it processes data. 1. Ingestion points: Domain names and IP addresses provided by users are passed directly as CLI arguments. 2. Boundary markers: No delimiters or boundary markers are used to separate user-provided data from command instructions. 3. Capability inventory: The skill utilizes shell execution and Go subprocess calls (exec.Command). 4. Sanitization: No evidence of input validation or sanitization is present to prevent malicious characters from triggering unintended command execution.
Recommendations
- AI detected serious security threats
Audit Metadata