glasser-research
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@glasser-ai/clipackage from the public NPM registry to enable its core research capabilities.\n- [COMMAND_EXECUTION]: Employs theBashtool to executeglasserCLI commands for authentication, searching the endpoint catalog, and running data collection tasks.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external third-party providers which could contain malicious instructions.\n - Ingestion points: Third-party API responses (e.g., Reddit, SERPs) read in
SKILL.md(Step 7).\n - Boundary markers: Not explicitly defined for the external provider responses.\n
- Capability inventory:
Bashexecution, fileRead, and fileWriteoperations across the workflow.\n - Sanitization: Uses JSON file inputs (
-f) for the CLI to prevent shell interpolation of user queries, though retrieved data is not filtered for prompt injection before being returned to the agent context.
Audit Metadata