jobber
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
jobber-clipackage on npm for installation vianpm installor execution vianpx. This is an external dependency required for the skill's primary functionality.\n- [COMMAND_EXECUTION]: The skill is centered around executing local shell commands via thejobberCLI to interact with account data and GraphQL APIs.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests untrusted data from the Jobber API.\n - Ingestion points: Commands like
jobber operations listandjobber graphql run(SKILL.md) fetch data from the Jobber private web API into the agent context.\n - Boundary markers: No specific boundary markers or instructions to ignore embedded commands in the fetched data are provided.\n
- Capability inventory: The agent has the ability to execute shell commands (via the
jobberCLI) and interact with the local filesystem (reading query and variable files).\n - Sanitization: There is no evidence of sanitization or filtering of the content retrieved from the API before it is processed by the agent.
Audit Metadata