dmv
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to execute identity registration and verification commands viabunx dmv-agentandnpx @agentcommunity/dmv-agent.- [EXTERNAL_DOWNLOADS]: The skill fetches and executes the@agentcommunity/dmv-agentpackage from the npm registry usingnpxorbunx. These tools and packages are official resources provided by the skill author, 'agentcommunity'.- [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection by interpolating$ARGUMENTSdirectly into shell commands. - Ingestion points: The
$ARGUMENTSvariable is used in the registration and verification commands inSKILL.md. - Boundary markers: Explicit delimiters for the shell arguments are absent in the command template.
- Capability inventory: The skill has access to the
Bashtool for command execution. - Sanitization: The instructions require the AI to validate the
agent-nameagainst specific rules (lowercase alphanumeric, hyphens allowed in middle, 3-63 characters) prior to execution, which acts as a manual sanitization step.
Audit Metadata