testing-cli-compatibility
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the agent to execute a local PowerShell script located at
./deployment/scripts/test-cli-compatibility.ps1and perform various shell operations using thecopilotcommand-line interface to test system configuration. - [INDIRECT_PROMPT_INJECTION]: The skill implements a diagnostic workflow where the agent sends prompts to the CLI and processes the returned text (e.g., lists of skills, MCP server names, and project identifiers) to validate the environment. This ingestion point lacks explicit boundary markers or sanitization, forming an attack surface where data from the local repository or external tools could theoretically influence the agent's behavior during the validation process.
Audit Metadata