nestr-insights
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references documentation and setup guides located on the vendor's official GitHub repository.
- [COMMAND_EXECUTION]: Provides commands to interact with the
nestrCLI tool for workspace management and encourages the use ofjqfor processing JSON output. - [DATA_EXFILTRATION]: Includes functionality to export workspace and governance data to local files via shell redirection.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the Nestr workspace (metrics, hints, and graph data) which could potentially contain instructions intended to influence agent behavior.
- Ingestion points: CLI output from
links list,insights,hints, andexport. - Boundary markers: No delimiters are specified for the external data.
- Capability inventory: Subprocess execution of
nestrandjq, and local file writing. - Sanitization: No explicit data validation or sanitization steps are defined for external input.
Audit Metadata