cli-routing

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the omniroute package globally via npm or execute it using npx from the public npm registry.
  • [COMMAND_EXECUTION]: The skill provides a comprehensive set of subcommands (e.g., suggest, combo list, combo create, combo delete) for the omniroute utility, facilitating shell-based management of routing configurations.
  • [INDIRECT_PROMPT_INJECTION]: By interacting with an external CLI tool and processing its output (such as listed routing configurations or metrics), the skill exposes an attack surface for indirect prompt injection if the tool's environment or configuration contains malicious instructions. However, the current static instructions do not demonstrate active exploitation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 06:07 PM