tooluniverse-use-shared-computer
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for using the
tu connectCLI command to link a local ToolUniverse instance to a remote computer using a share code.- [REMOTE_CODE_EXECUTION]: The skill is centered around therun_remote_toolcapability, which allows for the execution of functions and models on external hardware (such as lab GPUs). This is the documented purpose of the skill to facilitate sharing scientific tools.- [INDIRECT_PROMPT_INJECTION]: The skill processes data from a remote registry and external model outputs, creating an attack surface for indirect prompt injection. - Ingestion points: Descriptions from
list_remote_toolsand result data fromrun_remote_toolas referenced inSKILL.md. - Boundary markers: None identified within the skill instructions.
- Capability inventory: The skill invokes
run_remote_toolto perform remote operations as described inSKILL.md. - Sanitization: The instructions do not specify sanitization for data returned from remote tools.
Audit Metadata