pilot-protocol
Fail
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The installation process involves downloading a shell script from
https://pilotprotocol.network/install.shand executing it viash. Although the skill advises the user to inspect the script usinglessbefore running it, this remains a remote code execution pattern that fetches content from an external domain at runtime. - [DYNAMIC_EXECUTION]: The skill includes functionality to install 'agent-native capabilities' through the
pilotctl appstore installcommand. This mechanism allows the agent to fetch and run third-party code locally, which constitutes a dynamic execution vector from a remote repository. - [PERSISTENCE_MECHANISMS]: The skill instructs the user to start a persistent background daemon (
pilotctl daemon start). The documentation explicitly notes that this process maintains a connection to a public P2P network and can statefully change the local environment by installing app-store packages. - [COMMAND_EXECUTION]: The skill utilizes a custom CLI tool (
pilotctl) to perform network operations, manage per-peer trust models, and interact with the local filesystem (e.g., reading JSON from~/.pilot/inbox/).
Recommendations
- HIGH: Downloads and executes remote code from: https://pilotprotocol.network/install.sh - DO NOT USE without thorough review
Audit Metadata