cli-tunnel
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user or agent to install the
omniroutepackage from the npm registry. This package is not from a recognized trusted organization. - [COMMAND_EXECUTION]: The skill provides instructions for executing various CLI commands to manage network tunnels, including creating, listing, and rotating connections.
- [PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection via the processing of external data.
- Ingestion points: Subcommands such as
tunnel logs,tunnel status, andtunnel infopull data from external network providers and log streams into the agent's context. - Boundary markers: There are no markers or safety instructions provided to help the agent distinguish tool output from potential malicious instructions embedded in the logs.
- Capability inventory: The skill has the capability to create and stop network tunnels, which could be misused if the agent obeys instructions found in untrusted data.
- Sanitization: No validation or sanitization of the data returned by the subcommands is described.
Audit Metadata