deepline-monitors
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the
deeplineCLI package from the public NPM registry and a vendor-controlled registry located athttps://code.deepline.com/api/v2/npm/. - [COMMAND_EXECUTION]: The skill performs several shell operations to configure the environment, including modifying NPM prefixes, updating the system PATH, and executing CLI-specific commands such as
deepline auth registeranddeepline auth statusto manage credentials. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by processing external data and user input.
- Ingestion points: The skill reads a recipe file located at
../deepline-gtm/recipes/deepline-monitors.mdand processes user-provided prompts. - Boundary markers: No specific delimiters or instructions to ignore embedded commands within the recipe files were identified.
- Capability inventory: The skill facilitates shell command execution via the
deeplinetool and file system navigation to retrieve secondary instructions. - Sanitization: There is no evidence of sanitization or structural validation for the content of the referenced recipe files before processing.
Audit Metadata