ocx
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill operates via the
ocxCLI tool, allowing the agent to manage a local proxy service. This includes performing service restarts (ocx service restart), modifying system-level configurations, and managing local storage archives. - [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for reading and processing request logs (
ocx logs) and usage data, which are sourced from external interactions. This presents a potential surface where the agent could ingest malicious instructions embedded in log data. - Ingestion points: Untrusted data enters the agent context via
ocx logs,ocx usage, andocx account listcommands (in fileSKILL.mdandreferences/01_management_surface.md). - Boundary markers: The skill repeatedly instructs the agent to use the
--jsonflag to ensure it processes structured data rather than raw text, reducing the risk of accidental instruction following. - Capability inventory: The agent possesses significant management capabilities, including
ocx account pause,ocx storage cleanup --yes, andocx service restart. - Sanitization: The instructions emphasize verifying proxy status via
ocx readyandocx statusbefore performing management actions, and it explicitly forbids the agent from handling plaintext credentials returned by CLI commands.
Audit Metadata