sbom-syft
Fail
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides a command to install the Syft tool by fetching a shell script from its official repository and piping it to a shell interpreter.
- Evidence:
curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/binin SKILL.md. - [EXTERNAL_DOWNLOADS]: The skill downloads the installation script for Syft from the Anchore organization's official GitHub repository.
- [COMMAND_EXECUTION]: The skill executes shell commands to run the
syftbinary for filesystem and container image analysis. - [INDIRECT_PROMPT_INJECTION]: The skill's instructions for running scans are vulnerable to command injection if malicious input is provided as a directory path or image tag, as the inputs are interpolated directly into shell commands.
- Ingestion points: The
<target-path>and<image>:<tag>parameters supplied by the user. - Boundary markers: No delimiters or boundary markers are used to isolate user input.
- Capability inventory: Shell execution capabilities are used to run the
syftcommand. - Sanitization: No input validation or escaping mechanisms are described to prevent command injection characters (e.g.,
;,&&,|) from affecting the shell command execution.
Recommendations
- HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/anchore/syft/main/install.sh - DO NOT USE without thorough review
Audit Metadata