100Critical
The skill executes unverified remote code via insecure shell pipes and performs unauthorized network operations, creating critical vulnerabilities for arbitrary code execution and prompt injection attacks.
Skill Info
NameEximAgent/cli/eximagent
Registrygithub
Version171667a0c026
PURLpkg:github/EximAgent/cli@171667a0c026?skill=eximagent
Stars2
Source
SHA-2560cad17a26c3d...
SHA-19ba1970f796b...
MD5ef635e8db21c...
TLSH019309976ba8...
ssdeep1536:+4nXRIj...
Size95,057 bytes
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
GitHub
Skills.shDocs
npx skills add https://github.com/EximAgent/cliAssessments (4)
AI Agent Traps ↗Remote code download and execution detectedcriticalremote execAML.T0050AML.T0053AML.T0072LLM05:2025LLM06:2025
Remote code download and execution detected
95% confidenceline 15
curl -fsSL https://cli.eximagent.ai/install | sh
A remote resource is downloaded with curl/wget and piped directly into a shell interpreter (optionally via sudo). The downloaded script runs with no integrity check (no checksum/signature), so a compromised server, MITM, or hijacked URL leads to arbitrary code execution. Download to a file, verify it (e.g. sha256sum -c against a pinned digest, or a signature), then execute it.criticalvulnAML.T0050AML.T0053AML.T0072LLM05:2025LLM06:2025
A remote resource is downloaded with curl/wget and piped directly into a shell interpreter (optionally via sudo). The downloaded script runs with no integrity check (no checksum/signature), so a compromised server, MITM, or hijacked URL leads to arbitrary code execution. Download to a file, verify it (e.g. sha256sum -c against a pinned digest, or a signature), then execute it.
95% confidenceline 1
curl -fsSL https://cli.eximagent.ai/install | sh
High-risk installation patternhighsupply chainAML.T0010AML.T0019AML.T0058LLM03:2025
The installation instructions use `curl | sh` and `irm | iex`, which are classic vectors for arbitrary code execution without integrity verification. This bypasses security controls by executing remote content directly in the user's shell environment. [ensemble: confirmed by 3/3 passes; severity set to the agreed median (ADR-0067).]
100% confidenceline 15
curl -fsSL https://cli.eximagent.ai/install | sh
Potential for indirect prompt injectionmediumindirect prompt injection
The skill instructs the agent to crawl arbitrary websites (`crawl run`) and process the content. If the agent uses this content to inform subsequent actions or outreach, an attacker-controlled website could inject malicious instructions into the agent's reasoning process. [ensemble: confirmed by 2/3 passes; severity set to the agreed median (ADR-0067).]
80% confidence
eximagent crawl --url ...
Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Version History (9)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/EximAgent/cli/eximagent)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/EximAgent/cli/eximagent"><img src="https://mondoo.com/ai-agent-security/api/badge/github/EximAgent/cli/eximagent.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/EximAgent/cli/eximagent.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow