skills/auth0/agent-skills/auth0-cli/Gen Agent Trust Hub

auth0-cli

Pass

Audited by Gen Agent Trust Hub on May 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a documentation reference for the Auth0 CLI tool. All commands and examples align with the official documentation and represent standard administrative usage for managing identity services.\n- [EXTERNAL_DOWNLOADS]: The skill includes an installation step for the auth0 CLI via the official Homebrew tap (auth0/auth0-cli/auth0). This resource is provided by a recognized and well-known service provider.\n- [COMMAND_EXECUTION]: The skill enables the agent to execute shell commands using the auth0 binary to perform administrative tasks, including creating applications, managing user records, and deploying serverless functions. This functionality is the primary intended purpose of the skill.\n- [PROMPT_INJECTION]: The skill uses user-supplied data as arguments for CLI commands, which constitutes an indirect prompt injection attack surface (Category 8).\n
  • Ingestion points: Arguments like --name, --email, and --query in SKILL.md and references/cli.md.\n
  • Boundary markers: No explicit delimiters are present in the provided command templates.\n
  • Capability inventory: The auth0 CLI has broad capabilities for managing cloud identity resources.\n
  • Sanitization: No sanitization or validation of user-provided strings is mentioned in the skill instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
May 5, 2026, 04:42 PM