umodel-query
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the
umctlCLI tool usinggo install github.com/alibaba/UnifiedModel/cmd/umctl@latest. This is a vendor-provided resource belonging to the skill author. - [COMMAND_EXECUTION]: The skill facilitates the execution of the
umctlCLI to perform entity, topology, and model queries, as well ascurlandjqcommands for executing telemetry query plans. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes JSON 'plans' from a UModel server which contain query strings and endpoint metadata used for subsequent execution steps. This creates an attack surface where a malicious or compromised server could return manipulated parameters to influence the agent's behavior.
- Ingestion points: Output from
umctl query run ... | entity-call get_metrics/get_logsas described inreferences/metrics-logs.md. - Boundary markers: None identified.
- Capability inventory: The skill uses
curland shell execution to dispatch queries against external endpoints. - Sanitization: The skill provides instructions for manual endpoint overrides but lacks automated validation for the query content or endpoint targets received in the plan.
- [DYNAMIC_EXECUTION]: In
references/metrics-logs.md, the agent is instructed to extract PromQL or Elasticsearch DSL queries from a server-provided JSON object and interpolate them into shell commands for execution viacurl.
Audit Metadata