cli-routing
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
omniroutepackage globally via npm or execute it using npx from the public npm registry. - [COMMAND_EXECUTION]: The skill provides a comprehensive set of subcommands (e.g.,
suggest,combo list,combo create,combo delete) for theomnirouteutility, facilitating shell-based management of routing configurations. - [INDIRECT_PROMPT_INJECTION]: By interacting with an external CLI tool and processing its output (such as listed routing configurations or metrics), the skill exposes an attack surface for indirect prompt injection if the tool's environment or configuration contains malicious instructions. However, the current static instructions do not demonstrate active exploitation.
Audit Metadata