semantius-admin
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The preflight environment setup installs the Bun runtime using official installation scripts (
curl | bashor the PowerShell equivalent) from bun.sh.\n- [EXTERNAL_DOWNLOADS]: The skill fetches tool binaries (jq, yq) from official GitHub release pages and retrieves remote blueprint artifacts provided by the user via URL usingcurl.\n- [PRIVILEGE_ESCALATION]: On Linux platforms, the skill utilizessudowith system package managers (such asapt-getorsnap) to ensure required dependencies likejqandyqare installed.\n- [COMMAND_EXECUTION]: The skill executes shell commands and utilizes thesemantiusCLI to interact with the data platform and manage the local workspace artifacts.\n- [DYNAMIC_EXECUTION]: The orchestration pipeline involve generating and executing scripts through the Bun runtime for deployment and data operations, particularly in the modeler sub-skill.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests markdown data from remote URLs which is subsequently processed by sub-skills in the pipeline to influence the deployment.\n - Ingestion points:
SKILL.md(Step 2 and Step 6.1) fetches remote markdown files viacurl.\n - Boundary markers: The skill validates the front-matter of the fetched file for specific artifact types.\n
- Capability inventory: Subprocess execution via
bunandsemantiusCLI, along with local file system writes.\n - Sanitization: Validates the
artifact:key in the file metadata before routing to the pipeline.
Audit Metadata