x-install
Warn
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill's documentation describes an installation process that uses a piped shell command:
curl -fsSL https://get.x-cmd.com | sh. This pattern executes code from a remote server without manual review by the user beforehand. - [COMMAND_EXECUTION]: The core functionality involves executing
x installshell commands based on user-provided parameters to retrieve installation instructions and manage software. - [EXTERNAL_DOWNLOADS]: The skill is configured to download installation scripts, binary packages, and data from several external sources including
get.x-cmd.com,github.com/x-cmd/release, andconda.prefix.dev. - [PROMPT_INJECTION]: An indirect prompt injection surface exists because user-provided software names are interpolated directly into shell commands.
- Ingestion points: User queries for software installation (e.g., "install [software]").
- Boundary markers: Not explicitly defined in the provided instruction patterns.
- Capability inventory: Execution of the
x installcommand via the shell. - Sanitization: No visible input validation or sanitization logic is provided in the skill instructions.
Audit Metadata