gety-cli
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
getyCLI to perform searches, retrieve document content, and manage data connectors. This includes commands likegety search,gety doc, andgety connector. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from local files, which represents a potential surface for indirect prompt injection if documents contain malicious instructions.
- Ingestion points: Data is ingested via the
gety doccommand, which retrieves the full content of local documents (PDFs, docx, etc.). - Boundary markers: The instructions include best practices for handling large documents, such as redirecting output to temporary files and using
greporheadto inspect specific sections, which reduces the direct exposure of the agent's context to untrusted data. - Capability inventory: The skill can read local files, execute shell commands via the CLI, and manage local data connectors.
- Sanitization: The instructions emphasize synthesizing findings into natural language and citing sources, though they do not mandate specific sanitization of the document content itself.
- [DYNAMIC_EXECUTION]: The
gety connector install <directory>command allows for the installation of custom connectors from local directories, which involves loading and potentially executing logic within the Gety environment as part of its extensibility features.
Audit Metadata