openserv-client
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
@openserv-labs/clientpackage from the official NPM registry and references repositories under theopenserv-labsorganization. - [COMMAND_EXECUTION]: Provides instructions for using vendor-specific CLI tools such as
npx @openserv-labs/client deployfor agent deployment andnpx skillsfor maintenance. - [DATA_EXFILTRATION]: Facilitates communication with official platform infrastructure at
api.openserv.aiandplatform.openserv.aifor management and trigger operations. - [INDIRECT_PROMPT_INJECTION]: The skill defines an architecture where agents ingest untrusted data from external sources (webhooks, x402 payments).
- Ingestion points: Webhook and x402 trigger input fields defined in
SKILL.mdandexamples/agent.ts. - Boundary markers: Absent; no delimiters or instructions are provided to the LLM to ignore potentially malicious content within the ingested payload.
- Capability inventory: The example agent in
examples/agent.tsincludes aprocessRequestcapability which operates on this untrusted input. - Sanitization: Absent; the documentation does not describe or implement input validation or sanitization for data received via triggers.
Audit Metadata