rock-cli
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the tool's installation script from a well-known organizational infrastructure domain.\n
- Evidence:
bash -c "$(curl -fsSL http://xrl.alibaba-inc.com/install.sh)"inSKILL.md.\n- [REMOTE_CODE_EXECUTION]: Downloads and executes code from a remote source during the initial installation phase.\n - Evidence: The install command uses shell pipe execution to deploy the
rockclitool.\n- [COMMAND_EXECUTION]: Documents functionality for running arbitrary shell commands and Python scripts within managed sandboxes.\n - Evidence:
rockcli sandbox <id> exec 'python -c "print(1+1)"'inSKILL.md.\n- [DYNAMIC_EXECUTION]: Supports interactive shell access and session persistence in sandboxes through the REPL attach feature.\n - Evidence:
rockcli sandbox <id> attachas described inreferences/sandbox.md.
Audit Metadata