fin-opencli-reader
Warn
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [UNVERIFIABLE_DEPENDENCIES]: The skill requires installing
@jackwener/openclivianpmand usesnpx super-agentandnpx skills, which are third-party tools from unverified sources. - [COMMAND_EXECUTION]: The skill requires the execution of shell commands for setup and data retrieval, which can be misused if the tools are compromised.
- [PRIVILEGE_ESCALATION]: Using
npm install -goften necessitates elevated privileges (e.g.,sudo), increasing the potential impact of the external installation. - [INDIRECT_PROMPT_INJECTION]: The skill summarizes data from untrusted websites like Reddit and HackerNews.
- Ingestion points: Output from the
openclicommand when fetching content from external websites. - Boundary markers: No delimiters or instructions to ignore embedded commands are present.
- Capability inventory: Shell command execution via
npmandopencli. - Sanitization: No evidence of filtering or sanitization of retrieved web data.
Audit Metadata