setting-up-veris
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and execute an installation script for veris-proxy from the vendor's official GitHub repository: https://raw.githubusercontent.com/veris-ai/veris-proxy/main/scripts/install.sh.
- [COMMAND_EXECUTION]: The skill executes various system commands including docker for image building and veris-proxy for running tests.
- [DATA_EXFILTRATION]: The preflight script transmits the user's VERIS_API_KEY to the vendor's API endpoint (api.veris.ai) to confirm environment access.
- [REMOTE_CODE_EXECUTION]: The skill contains a pattern for piping a remote script to a shell for tool installation, targeting the vendor's own resource as described in the preflight check and setup instructions.
Audit Metadata