add-mattermost
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various system commands including
docker exec,mmctl,pnpm, and local shell scripts to manage Mattermost server settings and restart the host service. These operations are scoped to the primary purpose of server integration. - [EXTERNAL_DOWNLOADS]: The skill communicates with user-provided Mattermost API endpoints to fetch configuration data and verify bot identity. It uses these external resources to authenticate and validate the setup.
- [INDIRECT_PROMPT_INJECTION]: The skill processes JSON data from the external Mattermost server. To mitigate injection risks, the provided helper scripts (
configure.ts,read-response.mjs, andverify-runtime.ts) implement structured parsing, type checking, and strict regex validation for identifiers and URLs.
Audit Metadata