add-model
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to executecurlcommands. These commands are designed to interact with the LiteLLM proxy API to add new models and perform test completions. - [DATA_EXFILTRATION]: The skill prompts for and transmits sensitive information, including the LiteLLM proxy admin key and provider-specific API keys, to a user-provided base URL. This data transfer is the intended administrative function of the skill for configuring the LiteLLM proxy and is consistent with the author's infrastructure.
- [PROMPT_INJECTION]: The skill instructions involve interpolating user-provided inputs into shell command templates, which represents a potential indirect injection surface.
- Ingestion points: User input for model names, providers, and credentials specified in SKILL.md.
- Boundary markers: None identified; the instructions provide a direct template for interpolation.
- Capability inventory: Execution of network requests via
curlthrough theBashtool. - Sanitization: No specific sanitization or escaping instructions are provided for the user-supplied parameters.
Audit Metadata