nestr-insights

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references documentation and setup guides located on the vendor's official GitHub repository.
  • [COMMAND_EXECUTION]: Provides commands to interact with the nestr CLI tool for workspace management and encourages the use of jq for processing JSON output.
  • [DATA_EXFILTRATION]: Includes functionality to export workspace and governance data to local files via shell redirection.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the Nestr workspace (metrics, hints, and graph data) which could potentially contain instructions intended to influence agent behavior.
  • Ingestion points: CLI output from links list, insights, hints, and export.
  • Boundary markers: No delimiters are specified for the external data.
  • Capability inventory: Subprocess execution of nestr and jq, and local file writing.
  • Sanitization: No explicit data validation or sanitization steps are defined for external input.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 04:46 AM