mojo
Fail
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The installation instructions in
SKILL.mdutilize a piped execution pattern:curl -s https://get.modular.com | sh -. This method downloads a script from a remote server and executes it directly in the shell without providing a mechanism for the user or agent to verify the content before execution. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download and installation of external development tools and binaries, specifically the Modular CLI and the Mojo SDK, through the
modular install mojocommand. - [COMMAND_EXECUTION]: The skill includes instructions to execute several system commands for environment setup, package management, and compilation, such as
modular install,mojo run, andmojo build.
Recommendations
- CRITICAL: 1 infected file(s) detected - DO NOT USE
- HIGH: Downloads and executes remote code from: https://get.modular.com - DO NOT USE without thorough review
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata