ruler-progress-render
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a project from "https://github.com/sxhzju/ruler-progress-animator.git" at runtime.- [REMOTE_CODE_EXECUTION]: The "scripts/render_ruler_progress.sh" script executes "npm install" within the downloaded repository. This process can trigger post-install scripts or other lifecycle hooks defined in the external "package.json", leading to the execution of code from an unverified source.- [COMMAND_EXECUTION]: The skill utilizes shell commands ("git", "npm", "npx", "node") to clone the repository, install dependencies, and initiate the Remotion rendering engine.- [INDIRECT_PROMPT_INJECTION]: The skill has an indirect injection surface as it processes content from an external, potentially attacker-controlled repository.
- Ingestion points: "scripts/render_ruler_progress.sh" reads and executes content from the cloned "ruler-progress-animator" repository.
- Boundary markers: None present. The skill assumes the remote repository is safe and proceeds with execution.
- Capability inventory: Subprocess calls via "bash", "npm", "npx", and "node" in "scripts/render_ruler_progress.sh".
- Sanitization: No validation or sanitization of the downloaded code or configuration files is performed before execution.- [DYNAMIC_EXECUTION]: The script uses "node -e" to evaluate JavaScript snippets at runtime to extract composition IDs and properties from local files within the downloaded repository.
Audit Metadata