cimis-cli
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses standard command-line tools for its intended purpose of retrieving weather data. Instructions for authentication using environment variables follow security best practices for secret management.
- [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface through external weather reports, which is inherent to its primary function.
- Ingestion points: Data returned from the CIMIS API via the cimis CLI (SKILL.md).
- Boundary markers: None present.
- Capability inventory: Shell execution of the cimis command to fetch, query, and export data.
- Sanitization: None present.
Audit Metadata