use-ryvn
Pass
Audited by Gen Agent Trust Hub on May 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download an installation script from the vendor's official website at
https://ryvn.ai/install.shto set up the environment. - [REMOTE_CODE_EXECUTION]: The skill uses a
curl | bashpattern to execute the vendor's installation script for theryvnCLI. - [COMMAND_EXECUTION]: The skill utilizes the system shell to run
ryvnCLI commands for infrastructure management, resource provisioning, and log retrieval. - [PROMPT_INJECTION]: Instructions in the
Feedbacksection ofSKILL.mdencourage the agent to automatically submit feedback to the vendor without seeking user permission when encountering bugs or workflow issues, which reduces user oversight for that specific action. - [INDIRECT_PROMPT_INJECTION]: The skill provides an attack surface for indirect prompt injection by ingesting and processing external, potentially untrusted data from application logs (
ryvn logs) and Kubernetes manifests (ryvn get manifest). - Ingestion points: Reading logs and Kubernetes manifests in
operate.md. - Boundary markers: None explicitly defined in the instructions for log processing.
- Capability inventory: Full access to
Bashand theryvnCLI to manipulate infrastructure. - Sanitization: Relies on the underlying CLI and LLM guardrails.
Audit Metadata