hyper-cli
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
hyperaiCLI commands on the host system to search, describe, and call various integrated tools (e.g., Gmail, Meta Ads). These commands are used to bridge marketing workflows from the agent to a terminal environment. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: User-provided data is interpolated into shell commands via flags (e.g.,
--to,--subject) and JSON blobs (e.g.,--json '{...}') inSKILL.md. - Boundary markers: The skill encourages the use of the
--jsonflag and shell quoting to delimit structured input from command parameters. - Capability inventory: The skill can execute a wide range of marketing and communication tools via
hyperai calland manage authentication contexts withhyperai connections use. - Sanitization: The skill relies on the
hyperaiCLI's internal schema validation (verified viadescribe --parameters) rather than explicit instruction-based sanitization.
Audit Metadata