oraclecloud-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill guides users through setting up the official Oracle Cloud CLI and Python SDK for local development.
- [CREDENTIALS_UNSAFE]: The skill interacts with OCI configuration files (
/.oci/config) and SSH keys (/.ssh/id_rsa.pub). This access is necessary for the stated purpose of OCI development and uses standard placeholders rather than hardcoded credentials. - [PERSISTENCE]: It recommends adding shell aliases to profile files (~/.bashrc, ~/.zshrc) to improve productivity, which is a common and non-malicious practice for CLI tools.
- [INDIRECT_PROMPT_INJECTION]: The skill reads from local environment files (.env) and OCI configuration data. While these represent an input surface, the skill uses them for legitimate API authentication and parameterization without any signs of instruction-overriding intent.
Audit Metadata