delete-user
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto perform administrative tasks, including listing users and sending POST requests to delete users from a LiteLLM proxy instance. - [INDIRECT_PROMPT_INJECTION]: The skill ingests
user_idvalues from the user to perform deletions, representing an indirect prompt injection surface where untrusted data influences agent actions. - Ingestion points: User-supplied
user_idstrings processed as described in SKILL.md. - Boundary markers: The instructions do not define specific delimiters or validation rules for the user-supplied IDs.
- Capability inventory: The skill utilizes
curlfor network requests and API interactions. - Sanitization: There is no explicit sanitization or validation of the user-provided IDs before they are interpolated into the API request payload.
Audit Metadata