discord-reader
Warn
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes dynamic context injection (the
!commandsyntax) inSKILL.mdto execute a shell command chain at load time to check for the presence and status of theopenclitool. - [EXTERNAL_DOWNLOADS]: The skill directs the user to install the
@jackwener/openclipackage globally via npm. This package originates from an unverified third-party account rather than a known or trusted organization. - [PROMPT_INJECTION]: The skill is designed to ingest and process data from Discord, which constitutes untrusted external content.
- Ingestion points: Discord data enters the agent context via the output of
opencli discord-app readandopencli discord-app searchcommands. - Boundary markers: The prompt instructions lack explicit delimiters or instructions to treat the ingested Discord content as untrusted data.
- Capability inventory: The skill environment allows for shell command execution and package installation.
- Sanitization: There is no mechanism described for sanitizing or filtering the content retrieved from Discord before it is used to inform agent decisions or outputs.
Audit Metadata