alera-automations
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
aleraCLI tool to manage agent automations, including creating, editing, and running scheduled tasks. This is the intended primary purpose of the skill and aligns with the toolset provided by the author. - [INDIRECT_PROMPT_INJECTION]: The skill enables users to define and run automated agent prompts, which establishes an attack surface for indirect prompt injection if those automations process data from untrusted sources.
- Ingestion points: Prompt content is ingested via CLI flags like
--promptand--prompt-fileinSKILL.md, and thepromptTemplateJSON field described inreferences/authoring.md. - Boundary markers: The documentation does not specify the use of delimiters or explicit instructions to the agent to ignore instructions embedded in the data being processed.
- Capability inventory: The
alera automation run-nowcommand allows for the immediate execution of defined automations, which can operate within workspaces and potentially interact with project files as described in theworktreeandproject-checkouttargets. - Sanitization: There are no sanitization or validation steps mentioned for the content provided to the automation prompts.
Audit Metadata