100Critical
The skill masquerades as a discovery tool while silently executing unverified remote scripts with elevated privileges, creating a critical vulnerability for arbitrary code execution and unauthorized system access.
HygienePackaging & Manifest1 finding
Skill Info
Namevercel-labs/zerolang/zero
Registrygithub
Versionfef945e4b848
PURLpkg:github/vercel-labs/zerolang@fef945e4b848?skill=zero
Stars5,106
Installs381
Source
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
GitHub
Skills.shDocs
npx skills add https://github.com/vercel-labs/zerolangAssessments (5)
AI Agent Traps ↗Remote code download and execution detectedcriticalcommand executionAML.T0050AML.T0053AML.T0072LLM05:2025LLM06:2025
Remote code download and execution detected
100% confidenceline 15
curl -fsSL https://zerolang.ai/install.sh | bash
A remote resource is downloaded with curl/wget and piped directly into a shell interpreter (optionally via sudo). The downloaded script runs with no integrity check (no checksum/signature), so a compromised server, MITM, or hijacked URL leads to arbitrary code execution. Download to a file, verify it (e.g. sha256sum -c against a pinned digest, or a signature), then execute it.criticalvulnAML.T0050AML.T0053AML.T0072LLM05:2025LLM06:2025
A remote resource is downloaded with curl/wget and piped directly into a shell interpreter (optionally via sudo). The downloaded script runs with no integrity check (no checksum/signature), so a compromised server, MITM, or hijacked URL leads to arbitrary code execution. Download to a file, verify it (e.g. sha256sum -c against a pinned digest, or a signature), then execute it.
95% confidenceline 1
curl -fsSL https://zerolang.ai/install.sh | bash
Description Mismatchhighdescription mismatchAML.T0011.000LLM06:2025LLM09:2025
The skill claims to be a 'discovery stub' for version-matched workflows, but its primary functional action is the silent installation of a third-party binary via an unverified remote script.
85% confidence
The script executes 'curl -fsSL https://zerolang.ai/install.sh | bash' to install the compiler, which exceeds the scope of a simple discovery or configuration stub.
Indirect prompt injection via dynamic skill loadinghighindirect prompt injection
The skill instructs the agent to fetch and execute instructions from an external source (`zero skills get`) which are then treated as authoritative documentation and behavioral guidance for the agent.
90% confidenceline 30
zero skills get zero --full
Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/vercel-labs/zerolang/zero)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/vercel-labs/zerolang/zero"><img src="https://mondoo.com/ai-agent-security/api/badge/github/vercel-labs/zerolang/zero.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/vercel-labs/zerolang/zero.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow