nso-device-ops
Warn
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references a remote resource URI 'https://resources.cisco-nso-mcp.io/environment' to retrieve environment summaries. This domain is not an official Cisco domain (cisco.com) and does not match the author's known infrastructure patterns, representing a reference to an unverified external source.- [COMMAND_EXECUTION]: The skill relies on the command 'cisco-nso-mcp-server', which is described as a pip-installed package. This is a non-standard package name that incorporates the 'Cisco' trademark but is not verified as official vendor software, posing a risk of executing unverified or malicious code if the package is not legitimate.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted device configuration and operational state data retrieved from network devices via Cisco NSO.
- Ingestion points: The 'get_device_config', 'get_device_state', and 'get_device_platform' tools in SKILL.md.
- Boundary markers: No boundary markers or instructions to ignore embedded commands within retrieved data are provided.
- Capability inventory: The skill includes the 'sync_from_device' tool, which has the capability to modify the NSO Configuration Database (CDB).
- Sanitization: The instructions do not specify any validation, filtering, or sanitization of the external data before it is presented to the agent.
Audit Metadata