trial-management
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
acli(Acquia CLI) command-line interface to perform operations such as creating trials (acli api:trials:create), checking status (acli api:account:find-trial), and listing resources. These are documented vendor operations for interacting with the Acquia Cloud API. - [INDIRECT_PROMPT_INJECTION]: The skill instructions involve processing data returned from Acquia API endpoints, which represents a potential injection surface if the data source were compromised.
- Ingestion points: Data returned from
acli api:account:find-trialandacli api:trials:list-templates(e.g., template names, descriptions, and site metadata). - Boundary markers: No specific delimiters or boundary markers for external data are defined in the instructions.
- Capability inventory: The skill possesses the capability to execute shell commands via
acliand perform network operations through that tool. - Sanitization: The instructions do not specify explicit sanitization or validation steps for the data received from the API responses.
Audit Metadata