trim-cli

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill is designed to manage a NAS system by executing the 'trim-cli' tool. It includes commands for high-risk operations such as storage pool formatting, file deletion, application uninstallation, and system power management (reboot/shutdown).
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the Node.js package '@trimjs/trim-cli@0.1.1' from the npm registry. This is the primary functional component of the skill and is documented as a resource provided by the vendor.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a vulnerability surface by ingesting untrusted data from the NAS environment (e.g., file names, photo metadata, application lists, and system logs) and exposing powerful capabilities to the agent.
  • Ingestion points: Data retrieved from the NAS via commands like 'file ls', 'photos search', 'docker container ls', and 'logger list'.
  • Boundary markers: The instructions do not explicitly provide delimiters for external data in the agent's context.
  • Capability inventory: Extensive administrative capabilities including file system modification, application lifecycle control, and storage management across multiple referenced files (file.md, app-center.md, stor.md).
  • Sanitization: The skill reference ('reference/_index.md') mentions an 'input guard' that rejects control characters, empty values, or excessively long parameters at the CLI level.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 02:05 AM