cardano-cli-doctor
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes shell execution placeholders (
!command) withinSKILL.mdto automatically gather environment metadata (such as CLI version and available command eras) when the skill is loaded. These operations are restricted to read-only diagnostic commands for the expected tool. - [EXTERNAL_DOWNLOADS]: The Docker wrapper script (
scripts/cardano-cli.sh) pulls thecardano-nodecontainer image fromghcr.io/intersectmboif the CLI is not found on the local host. This is a standard deployment practice for Cardano ecosystem tooling. - [INDIRECT_PROMPT_INJECTION]: The skill processes output from external command-line tools to determine compatibility. While this ingests external data into the agent's context, the interaction is limited to parsing structured help text and version information.
Audit Metadata