cli-policy-audit
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
omniroutepackage from the public npm registry usingnpm install -g omniroute. This is a standard procedure for using the vendor's CLI tool. - [COMMAND_EXECUTION]: The skill provides a comprehensive set of instructions for executing the
omnirouteCLI utility. It covers subcommands for auditing (audit tail,search,export), policy management (policy list,create,evaluate), and telemetry monitoring. - [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface where untrusted data could be introduced into the agent's context through CLI outputs.
- Ingestion points: The subcommands
audit search <query>,policy evaluate --context <json>, andpolicy import <file>inSKILL.mdingest external data. - Boundary markers: The skill does not define specific delimiters to separate tool output from agent instructions.
- Capability inventory: The skill can execute shell commands and write data to the local file system using the
--exportand--outflags. - Sanitization: No explicit sanitization or validation of the CLI output is described in the skill instructions.
Audit Metadata