auth0-cli
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation reference for the Auth0 CLI tool. All commands and examples align with the official documentation and represent standard administrative usage for managing identity services.\n- [EXTERNAL_DOWNLOADS]: The skill includes an installation step for the
auth0CLI via the official Homebrew tap (auth0/auth0-cli/auth0). This resource is provided by a recognized and well-known service provider.\n- [COMMAND_EXECUTION]: The skill enables the agent to execute shell commands using theauth0binary to perform administrative tasks, including creating applications, managing user records, and deploying serverless functions. This functionality is the primary intended purpose of the skill.\n- [PROMPT_INJECTION]: The skill uses user-supplied data as arguments for CLI commands, which constitutes an indirect prompt injection attack surface (Category 8).\n - Ingestion points: Arguments like
--name,--email, and--queryinSKILL.mdandreferences/cli.md.\n - Boundary markers: No explicit delimiters are present in the provided command templates.\n
- Capability inventory: The
auth0CLI has broad capabilities for managing cloud identity resources.\n - Sanitization: No sanitization or validation of user-provided strings is mentioned in the skill instructions.
Audit Metadata