adr-graph-easy-architect

Fail

Audited by Gen Agent Trust Hub on Apr 4, 2026

Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The preflight setup scripts located in references/preflight-setup.md utilize sudo to install system packages (e.g., sudo apt install -y cpanminus), which is a privilege escalation finding.
  • [REMOTE_CODE_EXECUTION]: The instructions in references/preflight-setup.md promote piping remote content directly into shell and Perl interpreters, specifically via the commands curl -L https://cpanmin.us | perl - and curl https://mise.run | sh.
  • [EXTERNAL_DOWNLOADS]: The skill requires downloading external executable tools and Perl modules from remote domains (cpanmin.us, mise.run) during the environment preparation phase without performing integrity checks.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Apr 4, 2026, 09:51 AM