linkerd-expert
Fail
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- Remote Code Execution (CRITICAL): The skill performs a direct execution of a remote script via shell piping.
- Evidence:
curl --proto '=https' --tlsv1.2 -sSfL https://run.linkerd.io/install | sh. - Source Analysis: The script is sourced from
run.linkerd.io, which is not listed in the trusted organizations or repositories defined in the security policy. - Risk: This method allows for arbitrary code execution on the host system without prior verification of the script content, posing a critical security threat if the source or connection is compromised.
Recommendations
- HIGH: Downloads and executes remote code from: https://run.linkerd.io/install - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata