skills/vinnie357/claude-skills/runex/Gen Agent Trust Hub

runex

Pass

Audited by Gen Agent Trust Hub on Apr 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/0.1.0/bundles.nu script executes external system commands tar and curl using Nushell's native subprocess invocation. tar is utilized to create compressed archives of workflow bundles, while curl handles the transmission of these archives to the Runex API server.
  • [EXTERNAL_DOWNLOADS]: The management scripts (runex.nu, debug.nu, bundles.nu) perform network communication with the Runex REST API using http get and http post commands. While the default target is localhost:4001, the destination can be configured via environment variables to any remote host.
  • [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface through the retrieval and display of workflow step logs in debug.nu.
  • Ingestion points: scripts/0.1.0/debug.nu and scripts/0.1.0/runex.nu ingest raw text data from the API response bodies (specifically the output and error fields of step runs).
  • Boundary markers: Absent. The scripts output the retrieved content directly to the console without delimiters or instructions to the agent to ignore embedded commands.
  • Capability inventory: The skill allows subprocess execution (via tar and curl), network requests (via http), and file system interaction (ls, open, path).
  • Sanitization: None. The content retrieved from the API is displayed without escaping or filtering, which may lead an agent to interpret malicious instructions contained within retrieved log data.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 20, 2026, 01:24 AM