adv-cli
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
advcommand-line tool to perform operations such as product searches, inventory management, and order processing. Commands are executed directly in the shell environment as documented inSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the Advance Commerce API through various
advcommands, which could theoretically contain malicious instructions targeting the agent. - Ingestion points: Data is brought into the agent's context through commands like
adv products search,adv orders list, andadv customers getas described inSKILL.md. - Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potentially malicious content embedded in the API responses.
- Capability inventory: The agent has the capability to execute shell commands using the
advCLI as defined throughoutSKILL.md. - Sanitization: There is no evidence of sanitization or validation of the data returned by the CLI before it is processed by the agent.
Audit Metadata