100Critical
The skill facilitates arbitrary code execution through insecure remote script piping, hides undocumented administrative commands, and performs unauthorized network access while bypassing security controls and sandbox restrictions.
Skill Info
NameEximAgent/cli/eximagent
Registrygithub
Version6166fea4aa2b
PURLpkg:github/EximAgent/cli@6166fea4aa2b?skill=eximagent
Stars2
Source
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
GitHub
Skills.shDocs
npx skills add https://github.com/EximAgent/cliAssessments (4)
AI Agent Traps ↗Description Mismatchcriticaldescription mismatchAML.T0011.000LLM06:2025LLM09:2025
The skill documentation promotes a 'one command' installation method that downloads and executes a remote script directly into a shell interpreter, which is a significant security risk (arbitrary code execution).
85% confidence
The 'Install' section contains: `curl -fsSL https://cli.eximagent.ai/install | sh` and `irm https://cli.eximagent.ai/install.ps1 | iex`.
Excessive Privilege via Shell Installationcriticalcommand executionAML.T0050AML.T0053AML.T0072LLM05:2025LLM06:2025
The skill instructs users to pipe remote scripts directly into a shell interpreter, which bypasses security controls and allows arbitrary code execution with the privileges of the host agent.
100% confidenceline 15
curl -fsSL https://cli.eximagent.ai/install | sh
Remote code download and execution detectedcriticalcommand executionAML.T0050AML.T0053AML.T0072LLM05:2025LLM06:2025
Remote code download and execution detected
100% confidenceline 15
curl -fsSL https://cli.eximagent.ai/install | sh
A remote resource is downloaded with curl/wget and piped directly into a shell interpreter (optionally via sudo). The downloaded script runs with no integrity check (no checksum/signature), so a compromised server, MITM, or hijacked URL leads to arbitrary code execution. Download to a file, verify it (e.g. sha256sum -c against a pinned digest, or a signature), then execute it.criticalvulnAML.T0050AML.T0053AML.T0072LLM05:2025LLM06:2025
A remote resource is downloaded with curl/wget and piped directly into a shell interpreter (optionally via sudo). The downloaded script runs with no integrity check (no checksum/signature), so a compromised server, MITM, or hijacked URL leads to arbitrary code execution. Download to a file, verify it (e.g. sha256sum -c against a pinned digest, or a signature), then execute it.
95% confidenceline 1
curl -fsSL https://cli.eximagent.ai/install | sh
Bypassing Sandbox via Network Egresshighcommand executionAML.T0050AML.T0053AML.T0072LLM05:2025LLM06:2025
The skill explicitly instructs users on how to bypass sandbox network restrictions to ensure the CLI can reach its external server, potentially exposing the environment to exfiltration.
90% confidenceline 147
re-run with it enabled (e.g. `codex --dangerously-bypass-approvals-and-sandbox`)
Hidden Administrative Capabilitieshighunauthorized tool use
The documentation references hidden '_admin/*' commands that are not listed in the command surface, suggesting undocumented capabilities that bypass user review.
90% confidenceline 388
Invoking `_admin/*` commands. Operator-tier, hidden.
Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Version History (9)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/EximAgent/cli/eximagent)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/EximAgent/cli/eximagent"><img src="https://mondoo.com/ai-agent-security/api/badge/github/EximAgent/cli/eximagent.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/EximAgent/cli/eximagent.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow