layero
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions frequently involve executing the Layero CLI tool using npx to perform site deployments, project status checks, and database management tasks.
- [CREDENTIALS_UNSAFE]: The skill manages authentication by accessing the LAYERO_TOKEN environment variable and the tool's local configuration file at ~/.layero/config.json to store and retrieve session tokens.
- [EXTERNAL_DOWNLOADS]: The skill triggers the download of the Layero CLI package from the npm registry at runtime using the npx layero@latest command.
- [REMOTE_CODE_EXECUTION]: By utilizing npx, the skill downloads and executes external code from the npm registry to facilitate platform operations.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection as it processes project files like package.json and build logs; however, it mitigates this by instructing the agent to use structured JSON output fields and specific event types for control flow rather than relying on raw text parsing.
Audit Metadata