302ai-cli
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the agent to install the
cli_302aiPython package from the public PyPI repository to enable its core functionality. - [COMMAND_EXECUTION]: The skill relies on executing the
302aicommand-line utility through subprocess calls for image, video, audio generation, and web searches. - [INDIRECT_PROMPT_INJECTION]: The skill's modules retrieve and process content from external sources, creating a surface for potential injection attacks. * Ingestion points: Data retrieved via
302ai search runand audio content processed via302ai stt transcribe. * Boundary markers: The instructions lack explicit delimiters or guidance for the agent to treat external content as untrusted. * Capability inventory: Includes command execution of the302aitool, network communication via the API, and file-writing capabilities (e.g.,song lyrics --output). * Sanitization: No specific mechanisms for sanitizing or validating external content are provided in the skill instructions.
Audit Metadata