skills/skynight137/skills/replit/Gen Agent Trust Hub

replit

Fail

Audited by Gen Agent Trust Hub on Nov 2, 2026

Risk Level: CRITICALEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPERSISTENCECOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads binaries and installers from several external domains to provision the sandbox environment.
  • Fetches the uv installer from Astral's official domain (astral.sh).
  • Downloads the Ollama runtime installer from ollama.com.
  • Retrieves the Hermes Agent installer from Nous Research (nousresearch.com).
  • Fetches Android command-line tools and Java JDKs from Google and Adoptium.
  • Downloads various static binaries (rclone, ffmpeg, cloudflared, tailscale) from their respective official GitHub release pages or S3 buckets.
  • [REMOTE_CODE_EXECUTION]: The setup scripts include patterns that download and execute remote shell scripts for tool installation.
  • scripts/setup/uv.sh downloads and runs the uv installer script.
  • scripts/setup/node_opencode.sh downloads and runs the Ollama and Hermes Agent installers.
  • These operations are directed at well-known and reputable technology providers and match the toolchain provisioning purpose.
  • [PERSISTENCE]: The skill implements robust mechanisms to ensure its configuration and services survive sandbox restarts.
  • Modifies $HOME/.config/bashrc and .replit to persist environment variables, tool paths, and aliases.
  • Configures .replit workflows to automatically launch background daemons like Tailscale and the LLM-Wiki knowledge server upon container boot.
  • [COMMAND_EXECUTION]: The toolkit provides advanced environment management capabilities involving shell command execution and daemon management.
  • Includes modules for setting up a non-root sshd server to facilitate SSH access to the sandbox.
  • Uses unshare to create mount namespaces, allowing for a private, extended view of the Nix store.
  • Features supervisor scripts for running complex stacks including Xvfb, window managers, and Node.js servers.
  • A file reputation scanner alert on scripts/setup/android.sh was determined to be a false positive triggered by textual representations of standard Android SDK license hashes.
Recommendations
  • HIGH: Downloads and executes remote code from: https://astral.sh/uv/install.sh, https://ollama.com/install.sh - DO NOT USE without thorough review
  • CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Nov 2, 2026, 12:07 PM