ansible-coder
Fail
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Remote Code Execution (CRITICAL): The automated scanner detected 'curl -fsSL https://get.docker.com | sh'. This pattern is a critical security risk because it executes unverified code from an external source with shell privileges. Any compromise of the remote server or the communication channel allows for arbitrary command execution on the host environment.
- External Downloads (HIGH): The script is fetched from an external domain (get.docker.com) that does not fall within the specific trusted GitHub organizations or repositories defined in the safety protocols. While the source is a known service, the method of execution lacks integrity verification or version pinning.
Recommendations
- CRITICAL: Downloads and executes remote code from untrusted source(s): https://get.docker.com - DO NOT USE
- AI detected serious security threats
Audit Metadata