replit
Fail
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPERSISTENCECOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads binaries and installers from several external domains to provision the sandbox environment.
- Fetches the
uvinstaller from Astral's official domain (astral.sh). - Downloads the Ollama runtime installer from
ollama.com. - Retrieves the Hermes Agent installer from Nous Research (
nousresearch.com). - Fetches Android command-line tools and Java JDKs from Google and Adoptium.
- Downloads various static binaries (rclone, ffmpeg, cloudflared, tailscale) from their respective official GitHub release pages or S3 buckets.
- [REMOTE_CODE_EXECUTION]: The setup scripts include patterns that download and execute remote shell scripts for tool installation.
scripts/setup/uv.shdownloads and runs theuvinstaller script.scripts/setup/node_opencode.shdownloads and runs the Ollama and Hermes Agent installers.- These operations are directed at well-known and reputable technology providers and match the toolchain provisioning purpose.
- [PERSISTENCE]: The skill implements robust mechanisms to ensure its configuration and services survive sandbox restarts.
- Modifies
$HOME/.config/bashrcand.replitto persist environment variables, tool paths, and aliases. - Configures
.replitworkflows to automatically launch background daemons like Tailscale and the LLM-Wiki knowledge server upon container boot. - [COMMAND_EXECUTION]: The toolkit provides advanced environment management capabilities involving shell command execution and daemon management.
- Includes modules for setting up a non-root
sshdserver to facilitate SSH access to the sandbox. - Uses
unshareto create mount namespaces, allowing for a private, extended view of the Nix store. - Features supervisor scripts for running complex stacks including Xvfb, window managers, and Node.js servers.
- A file reputation scanner alert on
scripts/setup/android.shwas determined to be a false positive triggered by textual representations of standard Android SDK license hashes.
Recommendations
- HIGH: Downloads and executes remote code from: https://astral.sh/uv/install.sh, https://ollama.com/install.sh - DO NOT USE without thorough review
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
Audit Metadata