senhasegura
Warn
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official DSM CLI binary from the vendor's GitHub repository.
- [COMMAND_EXECUTION]: Workflows involve executing the external DSM CLI binary to inject secrets into environments.
- [COMMAND_EXECUTION]: Installation instructions utilize
sudofor moving the CLI binary into system directories. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection attack surface (Category 8).
- Ingestion points: Secret data fetched from senhasegura PAM and DSM API endpoints.
- Boundary markers: The instructions lack explicit delimiters or safety markers for the fetched data.
- Capability inventory: Provides capabilities for subprocess management, network operations, and file system writes.
- Sanitization: The skill does not implement sanitization or validation for the content retrieved from the API.
- [SAFE]: Consistently advocates for secure credential handling via environment variables and encrypted platform secret stores.
Audit Metadata