autumn-setup
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input to create billing configurations and drive CLI actions. Ingestion points: Pricing details are gathered from user messages, external pricing pages, or project README files (SKILL.md). Boundary markers: There are no specific instructions or delimiters provided to the agent to treat user-provided data as untrusted or to ignore embedded instructions. Capability inventory: The skill possesses extensive capabilities including executing shell commands via
atmnandnpx, and writing to configuration files likeautumn.config.tsand.env(SKILL.md). Sanitization: No explicit sanitization, validation, or filtering of the external content is described before it is used to generate code or configurations. - [REMOTE_CODE_EXECUTION]: The skill downloads and executes remote code as part of its setup process. Execution method: Installs additional agent components using the command
npx skills add useautumn/skills -y(SKILL.md). Execution method: The initialization process installs theatmnCLI tool as a dependency usingnpx,pnpm,yarn, orbunx(SKILL.md). - [COMMAND_EXECUTION]: The skill performs multiple shell operations to manage the platform's lifecycle. Details: Runs commands like
atmn init,atmn login, andatmn pushto connect the project to the Autumn service and synchronize configurations (SKILL.md). Details: Automatically identifies the system's package manager to execute these tools (SKILL.md). - [EXTERNAL_DOWNLOADS]: The skill fetches resources from external endpoints managed by the vendor. Details: Fetches configuration and performs provisioning via
https://api.useautumn.com(references/keyless.md). Details: Downloads skill definitions from theuseautumn/skillsrepository (SKILL.md).
Audit Metadata