authenticating-looker-cli
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents a legitimate OAuth authentication flow for the Looker CLI. The operations described, such as creating profiles and handling redirect URLs, are standard for CLI tools that require browser-based authorization.
- [COMMAND_EXECUTION]: The skill utilizes the
looker-clitool to manage configuration profiles (profile add,profile use) and initiate sessions (session login). These commands are restricted to the local environment and are necessary for the skill's functionality. - [DATA_EXPOSURE]: The skill notes that authentication tokens and session data are stored in
~/.config/looker-cli/config.yaml. While this file contains sensitive information, the skill's behavior is consistent with standard practices for maintaining persistent CLI sessions. - [INDIRECT_PROMPT_INJECTION]: The agent is instructed to parse the output of
looker-cli user meto verify user roles and permissions. - Ingestion points: Tool output from
looker-cli user meand user-provided redirect URLs. - Boundary markers: None explicitly defined in the instructions.
- Capability inventory: Execution of
looker-clishell commands. - Sanitization: Not explicitly handled by the instructions.
- This represents a low-risk surface typical of tools that interact with external API outputs.
Audit Metadata