litium-cloud-cli
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to interact with the system by executing the
litium-cloudCLI tool. This includes managing environments, deploying applications, and configuring access controls on the Litium platform. - The commands are used to perform infrastructure-as-code operations and administrative tasks within the Litium Cloud ecosystem.
- [EXTERNAL_DOWNLOADS]: The skill references several external resources for its functionality, all of which are managed by the vendor or trusted providers.
- It fetches documentation and guides from
docs.litium.dev. - It utilizes the official Litium NuGet feed (
nuget.litium.com) for tool installation. - It directs users to official portals and monitoring tools at
portal.litium.cloudandinsights.litium.cloud. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests and processes external data to perform high-privilege operations.
- Ingestion points: Reads local YAML manifests (
litium-platform.yaml), configuration files (.litium-cloud.config,.npmrc), and ignores files (.litiumcloudignore). It also fetches documentation in Markdown format from the vendor's site. - Boundary markers: The skill expects structured YAML for manifests but does not define explicit delimiters to separate user data from instructions in non-structured inputs like SQL scripts.
- Capability inventory: The skill can execute CLI commands, read/write files, and perform network operations via the vendor tool.
- Sanitization: There are no explicit instructions for sanitizing external content before it is processed by the agent or the CLI tool.
- [DYNAMIC_EXECUTION]: The skill uses dynamic execution patterns to perform administrative tasks.
- It supports the execution of SQL scripts via the
app actioncommand, where the script content is read from a file. - It uses the
applycommand to declaratively update infrastructure based on the contents of YAML manifests.
Audit Metadata