multica-runtimes-and-repos
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
multicaCLI tool for infrastructure management tasks, including listing runtimes, updating runtime versions, deleting runtime registrations, and performing repository checkouts. These actions are performed using theBash(multica *)tool as defined in the skill configuration. - [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface where instructions embedded in external issue comments or autopilot context could influence the agent's troubleshooting actions.
- Ingestion points:
SKILL.md(issue/comment/autopilot context) - Boundary markers: None explicitly mentioned in the skill's instructions.
- Capability inventory: The skill is configured to use the
multicaCLI tool for runtime and repository operations. - Sanitization: The underlying implementation, as detailed in the referenced source map, includes daemon-side task token validation and registry checks to mitigate unauthorized actions.
Audit Metadata