refresh-oci-token
Warn
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [DATA_EXPOSURE]: The script reads sensitive authentication information and configuration settings from the local filesystem at
~/.oci/configand~/.oci/sessions/*/tokento manage session lifecycle. - [DYNAMIC_EXECUTION]: The script performs dynamic code generation and execution by constructing Emacs Lisp commands and evaluating them via
emacsclient --evalat runtime. - [OBFUSCATION]: The script utilizes Base64 encoding to mask the login URL payload within the generated Emacs Lisp string to prevent character escaping issues during execution.
- [COMMAND_EXECUTION]: The skill executes external system binaries including the
ociCLI andemacsclientto perform cloud authentication tasks and modify the system clipboard state. - [DATA_EXFILTRATION]: The login URL captured from the OCI CLI output is exfiltrated from the agent's immediate execution environment to the local system's clipboard (via the Emacs kill ring) using external command execution.
Audit Metadata