opper
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches version information and updated instruction files (
SKILL.md) fromskills.opper.aiand theopper-aiGitHub organization. These resources are hosted on the vendor's official infrastructure. - [COMMAND_EXECUTION]: The skill uses shell commands to inspect the local filesystem for environment variables (
OPPER_API_KEY) and existing project dependencies in files such aspackage.json,pyproject.toml, andrequirements.txtto determine the best integration path. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes local application source code to identify existing third-party LLM integrations. This analysis creates an attack surface where instructions embedded in the project files could potentially influence the agent's routing decisions.
- Ingestion points: Phase 1
grepoperations on local source files. - Boundary markers: None specified for the analysis of file content.
- Capability inventory: Shell command execution, network requests via
curl, and package management vianpx. - Sanitization: No explicit sanitization of the content found during file inspection is mentioned.
- [DYNAMIC_EXECUTION]: The skill implements a self-update mechanism that instructs the agent to fetch and follow remote instructions from the vendor's website if the local copy is detected to be out of date.
Audit Metadata