univer-cli
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate operational guide for the univer-cli tool, providing commands for installation, updates, and diagnostics.
- [EXTERNAL_DOWNLOADS]: Instructions include installing the univer-cli package via npm and querying the official NPM registry (registry.npmjs.org) for version information. These are standard procedures for the tool's ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and inspect .univer files, which constitutes a potential ingestion point for untrusted data. The ingestion points are .univer files. Boundary markers are not explicitly mentioned in the skill instructions. The capability inventory includes CLI-based file inspection, authoring, and verification. Sanitization is implemented via instructions for the agent to read back the target model and verify task-specific assertions.
Audit Metadata