NYC

using-crabnebula-cloud-with-tauri

Fail

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • REMOTE_CODE_EXECUTION (CRITICAL): Piped remote execution from an untrusted source.
  • Evidence: The skill uses the command curl -L https://cdn.crabnebula.app/install/cn | sh.
  • Risk: This method of execution is a severe security risk as it downloads a script from the internet and runs it directly through the shell without any verification of its content or integrity. The domain cdn.crabnebula.app is not a recognized trusted source, making this an extremely high-risk operation that could lead to full system compromise.
Recommendations
  • HIGH: Downloads and executes remote code from: https://cdn.crabnebula.app/install/cn - DO NOT USE without thorough review
  • AI detected serious security threats
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 17, 2026, 06:06 PM