mlwcli
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill documentation identifies that credentials and configuration are stored at
~/.config/mlwcli/auth.toml. This is the standard configuration path for themlwclitool's persistent state. - [PROMPT_INJECTION]: The skill processes data from external Miniflux, Linkding, and Wallabag services, which constitutes an indirect prompt injection surface.
- Ingestion points: External data enters the agent context via the
link list,feed list,entry list, andpage listcommands. - Boundary markers: The skill encourages the use of the
--jqand--jsonflags, which provide structured data boundaries that help differentiate content from instructions. - Capability inventory: The skill has the capability to execute the
mlwclibinary and read/write to its own configuration files. - Sanitization: The use of structured output (JSON/JQ) ensures that the agent receives data in a parsed format, though the semantic content of titles and notes remains unvalidated.
Audit Metadata