firstsales-setup
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill manages the installation and update of the
@firstsales.io/clipackage from the official NPM registry. This is the vendor's own tool and is necessary for the skill's primary function. - [COMMAND_EXECUTION]: The skill executes a local script
scripts/ensure-cli.shto check versions and perform the installation. It also uses thefirstsalesCLI to verify authentication and workspace configuration. - [INDIRECT_PROMPT_INJECTION]: The skill processes structured JSON output from the
firstsalesCLI and version metadata from NPM. This ingestion of external data is limited to trusted vendor tools and standard registries, posing minimal risk to the agent's behavior.
Audit Metadata