semantius-admin

Pass

Audited by Gen Agent Trust Hub on Oct 31, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The preflight environment setup installs the Bun runtime using official installation scripts (curl | bash or the PowerShell equivalent) from bun.sh.\n- [EXTERNAL_DOWNLOADS]: The skill fetches tool binaries (jq, yq) from official GitHub release pages and retrieves remote blueprint artifacts provided by the user via URL using curl.\n- [PRIVILEGE_ESCALATION]: On Linux platforms, the skill utilizes sudo with system package managers (such as apt-get or snap) to ensure required dependencies like jq and yq are installed.\n- [COMMAND_EXECUTION]: The skill executes shell commands and utilizes the semantius CLI to interact with the data platform and manage the local workspace artifacts.\n- [DYNAMIC_EXECUTION]: The orchestration pipeline involve generating and executing scripts through the Bun runtime for deployment and data operations, particularly in the modeler sub-skill.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests markdown data from remote URLs which is subsequently processed by sub-skills in the pipeline to influence the deployment.\n
  • Ingestion points: SKILL.md (Step 2 and Step 6.1) fetches remote markdown files via curl.\n
  • Boundary markers: The skill validates the front-matter of the fetched file for specific artifact types.\n
  • Capability inventory: Subprocess execution via bun and semantius CLI, along with local file system writes.\n
  • Sanitization: Validates the artifact: key in the file metadata before routing to the pipeline.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 31, 2026, 04:37 PM