limrun-access-tokens
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The documentation includes command-line examples with shell variables (e.g., $INSTANCE_ID, $TOKEN_ID, $ACCESS_TOKEN). If an agent uses these templates to process untrusted data from external sources without proper validation or sanitization, it could lead to command injection or unauthorized API actions.\n
- Ingestion points: Shell environment variables in CLI command examples in SKILL.md.\n
- Boundary markers: None provided in the command templates.\n
- Capability inventory: Execution of Limrun CLI commands.\n
- Sanitization: Not specified in the instruction text.\n- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of the vendor's CLI tool via the npm registry.\n
- Evidence: 'npm install --global lim' documented in SKILL.md.
Audit Metadata