list-connectors
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill utilizes the
Bashtool to execute a local CLI binary (ms). This tool is used to authenticate the user, list available connectors, and retrieve metadata about environment policies. The usage is restricted to informational commands such aslist,show, andlist-actions. - Workspace Data Processing: The skill reads local workspace files, specifically
ms.config.jsonandmemory-bank.md, to determine the current project state and environment context. This is a standard operation for identifying which data sources are already integrated into a project. - Indirect Prompt Injection Surface: Because the skill ingests data from external sources (the CLI tool output and
ms.config.json), there is a theoretical surface for indirect prompt injection if these sources were compromised with adversarial content. The risk is minimized as the skill primarily processes structured JSON data and usesjqfor filtering, which helps maintain data integrity before presentation to the agent.
Audit Metadata