deepline-analytics
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
deeplineCLI globally usingnpm install -g deepline. It also refers users to an external installation guide athttps://code.deepline.com/INSTALL.md. - [COMMAND_EXECUTION]: The skill utilizes the
deeplineCLI for operations such asdeepline auth statusanddeepline tools execute. It also targets a local runtime binary at<workspace-root>/.deepline/runtime/bin/deeplineif the global command is unavailable. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a bridge to external data sources including Snowflake tables (e.g.,
AERO_DB.CONVEX_RAW.*), Axiom production logs, and RudderStack events. - Ingestion points: Data is ingested through tool calls like
snowflake_run_semantic_queryandsnowflake_run_querywhich fetch results from external warehouses and logging services. - Boundary markers: The skill relies on structured JSON payloads for queries but does not explicitly define prompt-level delimiters to isolate ingested data from agent instructions.
- Capability inventory: The agent can execute CLI commands and perform warehouse queries via vendor-provided tools.
- Sanitization: No specific sanitization or filtering logic is described for the data returned from external sources before it is processed by the agent.
Audit Metadata