cli-hub-meta-skill
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a live catalog of available tools from a remote DigitalOcean Spaces bucket at
https://reeceyang.sgp1.cdn.digitaloceanspaces.com/SKILL.md. It also directs the agent to install thecli-anything-hubpackage from a public registry. - [REMOTE_CODE_EXECUTION]: The skill's primary function is to install and execute Python packages (
cli-anything-huband variouscli-anything-<name>tools) on the local system usingpip. - [COMMAND_EXECUTION]: The instructions rely on shell commands to manage software, including searching, listing, and installing packages, which grants the skill the ability to modify the environment and run arbitrary code associated with those packages.
- [INDIRECT_PROMPT_INJECTION]: The skill encourages the agent to ingest and act upon data from an external catalog, which could contain instructions intended to influence the agent's behavior.
- Ingestion points: The 'Live Catalog' section in
SKILL.mddirects the agent to read external tool descriptions and usage patterns from a remote URL. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the documentation for the catalog data.
- Capability inventory: The skill utilizes shell command execution via
pip installandcli-hubsubcommands. - Sanitization: No validation or sanitization of the remote catalog content is specified before the agent processes it.
Audit Metadata