give-me-tips
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
senpi --list-tipsto obtain a live list of tips in JSON format, which it uses to identify the specific feature a user is asking about. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests and processes external code and catalog data to generate its explanations.
- Ingestion points: Retrieves data from the
senpi --list-tipscommand output and reads source files from the@code-yeongyu/senpiandoh-my-openagentpackages. - Boundary markers (absent): No specific delimiters are used to separate ingested content from instructions.
- Capability inventory: The skill reads local files and executes the
senpiCLI tool. - Sanitization (absent): The skill does not perform specific sanitization of the ingested code text, as its primary function is to summarize and explain technical logic to the user.
Audit Metadata