devsecops-pipeline
Fail
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the user to download and execute an installation script from 'https://raw.githubusercontent.com/anchore/syft/main/install.sh' by piping it directly to 'sh'. This pattern is present in the setup instructions in 'SKILL.md' and is also explicitly written into the generated GitHub Actions template provided in 'REFERENCE.md'.
- [COMMAND_EXECUTION]: The skill facilitates the installation of various third-party security tools including 'semgrep', 'checkov', 'trivy', 'gitleaks', 'grype', 'cosign', and 'nuclei' using package managers like 'pip' and 'brew'.
- [INDIRECT_PROMPT_INJECTION]: The skill assesses repository maturity by scanning local files and directory structures, which represents an attack surface for data-driven injections.
- Ingestion points: The skill reads directory structures and CI configuration files ('.github/workflows', '.gitlab-ci.yml') relative to the path defined in 'SECSKILL_REPO_PATH'.
- Boundary markers: No explicit delimiters or warnings to ignore instructions within the scanned repository files are used.
- Capability inventory: The shell scripts use 'mkdir', 'grep', 'printf', and 'date' to process and report on repository data.
- Sanitization: There is no evidence of path validation or content escaping before the repository data is processed or interpolated into output files.
Recommendations
- HIGH: Downloads and executes remote code from: https://raw.githubusercontent.com/anchore/syft/main/install.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata