notis-cli
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
npxto execute commands via the Notis CLI for all operations, including app development and tool management. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of the
@notis_ai/clipackage from the public npm registry usingnpx. These are vendor-owned resources and are standard for this skill's purpose. - [REMOTE_CODE_EXECUTION]: The
notis tools execandexec-parallelcommands allow the agent to run capabilities from external MCP, Composio, and native Notis toolkits. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external tool outputs and search results, which creates a potential surface for indirect prompt injection.
- Ingestion points: Data enters the agent's context through the output of
notis tools search,notis tools describe, andnotis tools execas described inSKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions for processing tool output.
- Capability inventory: The skill has the capability to execute shell commands via
npxand perform network operations via the CLI's API interactions. - Sanitization: While the skill recommends
--dry-runand--get-schemato validate tool arguments, it does not provide mechanisms to sanitize natural language instructions within tool outputs.
Audit Metadata