cx-rum-setup
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the vendor's
cxCLI tool for administrative operations including API key management, environment profiling, and telemetry data verification. This includes accessing local configuration files in~/.cx/profiles/to identify the correct team and region for resource provisioning. - [EXTERNAL_DOWNLOADS]: Recommends the installation of the
@coralogix/browserpackage, which is the official SDK for the service. - [INDIRECT_PROMPT_INJECTION]: Dynamically retrieves SDK documentation and installation steps using
cx docs fetch. This information is then used to generate platform-specific setup instructions. - Ingestion points: Documentation content returned from
cx docsCLI commands. - Boundary markers: None implemented for processing documentation text.
- Capability inventory: Includes shell command execution (
cx,npm) and local file creation. - Sanitization: The skill relies on the integrity of the vendor's documentation service.
Audit Metadata