add-dial-number
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No attempts to override agent behavior or safety filters were detected. The instructions are procedural and align with the skill's stated purpose.
- [DATA_EXFILTRATION]: No sensitive local files (such as SSH keys or environment secrets) are accessed. Network-related operations are performed through the official 'dial' CLI tool to interact with the service provider's account, which is the intended functionality.
- [COMMAND_EXECUTION]: The skill executes local system commands and CLI tools using platform-specific directives. Security is maintained through strict regular expression validation on all user-supplied inputs (e.g., phone numbers and group IDs), effectively preventing command injection.
- [DYNAMIC_EXECUTION]: A benign use of the Node.js interpreter is employed to extract version metadata from a local configuration file. No evidence of runtime code generation, unsafe deserialization, or script injection was found.
- [PRIVILEGE_ESCALATION]: Service restarts are handled via a local shell script. The skill does not attempt to acquire root permissions, use 'sudo', or modify system-wide security policies.
Audit Metadata