cliproxyapi-manager-skill
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on a Python script (
scripts/cliproxyapi_manager.py) and platform-specific shell wrappers (.sh,.ps1,.bat) to execute management commands and interact with the CLIProxyAPI service. - [DATA_EXFILTRATION]: The skill is designed to transmit sensitive management keys and authentication files (such as service account JSON tokens) to a user-configured API endpoint. This behavior is the primary intended function of the skill for remote management.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from the CLIProxyAPI Management API, which serves as a potential attack surface for indirect prompt injection.
- Ingestion points: API response bodies are ingested and parsed within the
http_requestanddecode_bodyfunctions inscripts/cliproxyapi_manager.py. - Boundary markers: The skill does not employ specific delimiters or instructions to ignore embedded commands when displaying API output to the agent.
- Capability inventory: The skill possesses capabilities for network communication (via
urllib), file system writes (via the--outputparameter), and management of local configuration files. - Sanitization: The script includes a
redactfunction that automatically masks values associated with sensitive keys (e.g.,api-key,secret,token,bearer) before printing JSON output to the console.
Audit Metadata