deepline-monitors

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the deepline CLI package from the public NPM registry and a vendor-controlled registry located at https://code.deepline.com/api/v2/npm/.
  • [COMMAND_EXECUTION]: The skill performs several shell operations to configure the environment, including modifying NPM prefixes, updating the system PATH, and executing CLI-specific commands such as deepline auth register and deepline auth status to manage credentials.
  • [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by processing external data and user input.
  • Ingestion points: The skill reads a recipe file located at ../deepline-gtm/recipes/deepline-monitors.md and processes user-provided prompts.
  • Boundary markers: No specific delimiters or instructions to ignore embedded commands within the recipe files were identified.
  • Capability inventory: The skill facilitates shell command execution via the deepline tool and file system navigation to retrieve secondary instructions.
  • Sanitization: There is no evidence of sanitization or structural validation for the content of the referenced recipe files before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 02:12 PM
Security Audit — agent-trust-hub — deepline-monitors