moru
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation provides instructions to download the Moru CLI installation script from the official vendor domain at
https://moru.io/cli/install.sh. - [REMOTE_CODE_EXECUTION]: A setup pattern is documented that involves piping the vendor's remote installation script directly into the bash shell (
curl | bash). This is the standard, intended installation method for the Moru CLI. - [COMMAND_EXECUTION]: The primary purpose of the skill is to facilitate the execution of commands and scripts within isolated Firecracker microVMs, which is the core service provided by the Moru platform.
- [DATA_EXFILTRATION]: The skill mentions the use of environment variables such as
MORU_API_KEYfor authentication, but does not contain hardcoded secrets or evidence of unauthorized data transmission.
Audit Metadata