fabric-cli
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- External Package Execution: The skill uses
npxto execute thefabric-app-dataCLI. This is a standard way to run Node.js utilities for managing project-specific configurations like workspace and item IDs. - Indirect Data Ingestion: Commands such as
searchandqueryfetch metadata and data from external Fabric services, which are then processed by the agent. - Ingestion points: External data enters the agent context through the output of the CLI commands described in SKILL.md.
- Boundary markers: The CLI supports a
--jsonoutput format, which provides structured data for the agent to process. - Capability inventory: The skill utilizes shell command execution and local file system writes for configuration management.
- Sanitization: Sanitization and validation are primarily handled by the CLI tool and the service APIs it interacts with.
Audit Metadata