opencontext
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation instructs the installation of a global Node.js package
@aicontextlab/clifrom the NPM registry to provide context management capabilities. - [COMMAND_EXECUTION]: The skill extensively uses the
occommand-line tool via shell execution for initializing repositories, managing local databases, and building search indices. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and search document content, which creates a surface for indirect prompt injection if malicious instructions are stored in the documentation files.
- Ingestion points: Documents and search results are read into the agent's context through
oc search,oc doc ls, andoc context manifest(documented in SKILL.md). - Boundary markers: No explicit markers or "ignore instructions" delimiters are specified in the provided instructions for handling retrieved content.
- Capability inventory: The agent is granted access to powerful tools including
Bash,Read,Write,Grep, andGlob(configured in SKILL.md). - Sanitization: No specific sanitization or validation routines for ingested document data are described in the skill scripts or documentation.
Audit Metadata