pilot-protocol

Fail

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The installation process involves downloading a shell script from https://pilotprotocol.network/install.sh and executing it via sh. Although the skill advises the user to inspect the script using less before running it, this remains a remote code execution pattern that fetches content from an external domain at runtime.
  • [DYNAMIC_EXECUTION]: The skill includes functionality to install 'agent-native capabilities' through the pilotctl appstore install command. This mechanism allows the agent to fetch and run third-party code locally, which constitutes a dynamic execution vector from a remote repository.
  • [PERSISTENCE_MECHANISMS]: The skill instructs the user to start a persistent background daemon (pilotctl daemon start). The documentation explicitly notes that this process maintains a connection to a public P2P network and can statefully change the local environment by installing app-store packages.
  • [COMMAND_EXECUTION]: The skill utilizes a custom CLI tool (pilotctl) to perform network operations, manage per-peer trust models, and interact with the local filesystem (e.g., reading JSON from ~/.pilot/inbox/).
Recommendations
  • HIGH: Downloads and executes remote code from: https://pilotprotocol.network/install.sh - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Aug 25, 2026, 06:23 AM
Security Audit — agent-trust-hub — pilot-protocol