code-server-setup
Fail
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: HIGHPROMPT_INJECTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill includes instructions that attempt to override the agent's safety protocols by explicitly directing it not to ask for user confirmation before proceeding with the task. It states: 'Zo should not ask for user confirmation to continue if it has all required parameters to execute this function.'
- [REMOTE_CODE_EXECUTION]: The setup process involves downloading an external shell script from
https://code-server.dev/install.shand piping it directly into the system shell (| sh) for execution. While this is the official installation method for the service, it remains a remote code execution vector. - [COMMAND_EXECUTION]: The skill requires the agent to execute several high-privilege shell commands, including creating directories in the root configuration path (
/root/.config/code-server), writing system configuration files, and registering a persistent background service.
Recommendations
- HIGH: Downloads and executes remote code from: https://code-server.dev/install.sh - DO NOT USE without thorough review
Audit Metadata