dineway-cli

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill relies on executing the dineway CLI through the shell via npx to perform all primary tasks, including database initialization, server management, and content manipulation.\n- [EXTERNAL_DOWNLOADS]: The skill fetches the dineway package from the NPM registry at runtime using npx. It also documents dependencies on external platform tools such as Railway CLI, flyctl, and the Google Cloud CLI for deployment tasks.\n- [INDIRECT_PROMPT_INJECTION]: The skill creates an attack surface by ingesting untrusted data from the Dineway CMS and external web pages through crawling functionality.\n
  • Ingestion points: Content retrieved via npx dineway content get and data from the npx dineway seo crawl local command.\n
  • Boundary markers: The instructions do not define specific delimiters or warnings to prevent the agent from interpreting data from these sources as instructions.\n
  • Capability inventory: The skill has the ability to write project files (e.g., .env, Dockerfile, railway.json), modify database schemas, delete content, and trigger site deployments.\n
  • Sanitization: There is no evidence of sanitization or filtering of content fetched from the CMS or external websites before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 02:09 PM