atmos-toolchain
Warn
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads binaries from external registries (e.g., github.com/aquaproj/aqua-registry) and arbitrary user-defined HTTP or GitHub Release URLs for tool installation.- [REMOTE_CODE_EXECUTION]: The core functionality involves fetching and executing code from remote repositories via 'atmos toolchain install' and 'atmos toolchain exec'. The skill documentation explicitly notes that integrity checks like signature verification (Cosign, SLSA) are unsupported.- [COMMAND_EXECUTION]: Provides direct execution capabilities for any installed tool through the 'exec' subcommand, which runs downloaded binaries with user-provided arguments.- [CREDENTIALS_UNSAFE]: Uses environment variables such as ATMOS_GITHUB_TOKEN and GITHUB_TOKEN for GitHub API authentication, which are sensitive and require secure handling.
Audit Metadata