environment-setup-guide

Fail

Audited by Gen Agent Trust Hub on Feb 16, 2026

Risk Level: CRITICALEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • Remote Code Execution (LOW): The skill identifies a pattern for downloading and executing a script from https://get.docker.com. Although piping remote scripts to a shell is usually a critical risk, Docker is a recognized trusted organization per the Trust-Scope-Rule, which downgrades the severity of this specific finding to LOW.- External Downloads (LOW): The command uses curl to fetch an external script. Since this targets a trusted domain and is not paired with sensitive file access or data exfiltration, it is classified as low risk.
Recommendations
  • CRITICAL: Downloads and executes remote code from untrusted source(s): https://get.docker.com - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Feb 16, 2026, 07:46 AM