oodle-drop-rules
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
oodleCLI and standard utilities likejq,grep, andawkto manage metric drop rules and query observability data. - [EXTERNAL_DOWNLOADS]: Fetches and installs the
oodleCLI from the vendor's official Homebrew tap (oodle-ai/oodle/oodle). - [INDIRECT_PROMPT_INJECTION]: The skill processes data from the Oodle API (metrics, dashboards, and monitors) which constitutes a potential attack surface.
- Ingestion points: Reads output from
oodle metrics list,oodle dashboards list, andoodle monitors listin SKILL.md. - Boundary markers: None present.
- Capability inventory: Can create, update, and delete drop rules using the
oodle drop-rulescommand. - Sanitization: Processes structured JSON data using
jq.
Audit Metadata