pipecat-init
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
pipecatCLI tool to list options and scaffold projects. These commands are constructed based on user-selected options and are part of the tool's primary purpose. Safety is maintained by requiring user confirmation before execution and relying on a pre-installed CLI tool (pipecat). - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the output of
pipecat init --list-optionsto dynamically generate user prompts. While this is an ingestion point for external data, the data source is a local CLI tool, and the risk is minimal as the input is used only to populate selection lists for the user. Mitigation includes providing the user with a final summary of all choices for verification before the project is scaffolded.
Audit Metadata