dineway-cli
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on executing the
dinewayCLI through the shell vianpxto perform all primary tasks, including database initialization, server management, and content manipulation.\n- [EXTERNAL_DOWNLOADS]: The skill fetches thedinewaypackage from the NPM registry at runtime usingnpx. It also documents dependencies on external platform tools such as Railway CLI, flyctl, and the Google Cloud CLI for deployment tasks.\n- [INDIRECT_PROMPT_INJECTION]: The skill creates an attack surface by ingesting untrusted data from the Dineway CMS and external web pages through crawling functionality.\n - Ingestion points: Content retrieved via
npx dineway content getand data from thenpx dineway seo crawl localcommand.\n - Boundary markers: The instructions do not define specific delimiters or warnings to prevent the agent from interpreting data from these sources as instructions.\n
- Capability inventory: The skill has the ability to write project files (e.g.,
.env,Dockerfile,railway.json), modify database schemas, delete content, and trigger site deployments.\n - Sanitization: There is no evidence of sanitization or filtering of content fetched from the CMS or external websites before it is processed by the agent.
Audit Metadata