operately-cli
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the official
@operately/operately-clipackage from the NPM registry. This is a standard and expected distribution method for the tool. - [COMMAND_EXECUTION]: The skill relies on executing the
operatelyCLI to perform project management and collaboration tasks as detailed inSKILL.mdand the reference documentation. - [PROMPT_INJECTION]: The skill contains a surface area for indirect prompt injection.
- Ingestion points: The agent retrieves and processes markdown data (documents, descriptions, and check-ins) from the Operately platform using commands like
operately documents getoroperately projects get(found inSKILL.mdandresource-hubs.md). - Boundary markers: There are no explicit instructions or delimiters mentioned to help the agent distinguish between platform data and system instructions.
- Capability inventory: The agent can execute shell commands through the CLI, modify data on the platform, and write output to the local file system (described in
SKILL.md). - Sanitization: No validation or sanitization of content retrieved from the platform is documented before the agent interpolates it into its context.
Audit Metadata