add-dial-tool
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the Dial CLI directly onto the host machine using npm (
npm install -g @getdial/cli@0.37.0) and adds it to the container manifest for inclusion in agent images. These resources originate from the vendor's official package repository. - [COMMAND_EXECUTION]: The skill executes multiple shell commands to manage the installation lifecycle. This includes using
jqfor JSON processing,nclfor agent group management, andoneclifor credential handling. These commands are integral to the skill's purpose of provisioning communication tools. - [DATA_EXFILTRATION]: During the setup process, the skill reads the Dial API key from the local host configuration file (
~/.local/share/dial/auth.v1.json) to inject it into the OneCLI vault. This data remains within the user's controlled environment and is used to authorize the agent's outbound calls and messages. - [PRIVILEGE_ESCALATION]: The skill uses
chmod 600on temporary files containing API keys to ensure sensitive data is not readable by other users on the system during the injection process. It also performs a global npm installation which typically requires elevated permissions on the host.
Audit Metadata