antithesis-bootstrap
Warn
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
submit.shscript references and recommends the installation of thesnoutyCLI tool from a GitHub repository (github.com/orbitinghail/snouty) that is not included in the trusted vendors list. - [REMOTE_CODE_EXECUTION]: The skill facilitates the execution of the
snoutybinary, a third-party tool that manages the build and deployment of the user's system to a remote testing environment. - [COMMAND_EXECUTION]: The skill generates and executes shell scripts (
submit.sh,test.sh,setup-complete.sh) and uses container engines (Docker or Podman) to prepare and test the deployment. - [DATA_EXFILTRATION]: The skill's primary function includes pushing project code and configuration to a remote repository (
ANTITHESIS_REPOSITORY) as part of its documented workflow. - [PROMPT_INJECTION]: The skill analyzes local project files to generate testing infrastructure, creating a surface for indirect prompt injection.
- Ingestion points: The agent is instructed to analyze the System Under Test (SUT) by reading the user's project files (
SKILL.md, Step 2). - Boundary markers: No explicit delimiters or instructions are used to prevent the agent from following instructions embedded in project files.
- Capability inventory: File writing, shell script execution, container management, and network communication via the
snoutytool. - Sanitization: No validation or filtering is performed on the project data before it influences script generation.
Audit Metadata