add-key
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto perform network requests to a user-provided API endpoint for key generation and retrieval. - [COMMAND_EXECUTION]: Utilizes a
python3one-liner to parse JSON responses from the proxy server and extract metadata. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data (such as key aliases, model names, and budget limits) which are then interpolated into a shell command payload.
- Ingestion points: User-provided inputs for key configuration parameters (SKILL.md).
- Boundary markers: None provided in the command templates.
- Capability inventory: Network access via
curland local execution viapython3(SKILL.md). - Sanitization: No specific sanitization or escaping logic is defined within the skill instructions; it relies on the agent's default handling of variables.
- [EXTERNAL_DOWNLOADS]: References official documentation at
litellm.vercel.app, which belongs to a well-known hosting service and is associated with the project's vendor.
Audit Metadata