hive-setup
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Fetches and executes an installation script from
astral.sh(a well-known service) to install theuvtoolchain if it is not already available on the system. - [DYNAMIC_EXECUTION]: Executes a local shell script named
prepare.shfound within cloned task repositories to initialize the environment for specific tasks. - [COMMAND_EXECUTION]: Utilizes platform and toolchain commands such as
brew install,apt-get install,pip install, and varioushiveCLI operations for installation and agent management. - [PRIVILEGE_ESCALATION]: Uses
sudo apt-geton Linux systems to ensure required Python packages are installed at the system level. - [EXTERNAL_DOWNLOADS]: Downloads platform updates from the vendor's repository on
github.comand project dependencies viapiporuvfromrequirements.txtfiles. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the Hive server which could potentially influence agent behavior through task descriptions or identity responses.
- Ingestion points: Results from
hive task listandhive auth whoami, and metadata in task configuration files like.hive/fork.json(SKILL.md). - Boundary markers: None present.
- Capability inventory: Shell execution (
bash,sh), file permission management (chmod), and package managers (pip,uv). - Sanitization: None present.
Audit Metadata