connect
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local CLI tools such as
claude,codex,cursor, andaltitudeto gather version information and perform authentication commands likealtitude statusandaltitude connect. - [DYNAMIC_EXECUTION]: The instructions require the agent to run a JavaScript setup script (
altitude-cursor-setup.mjs) located in the skill's directory using Node.js to configure plugin registration and hooks. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
@learnaltitude/clipackage from the npm registry, which is the primary tool needed for the service integration. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external command outputs, such as version strings and pairing status messages, which represents a standard but low-risk surface for indirect prompt injection.
Audit Metadata