otterdrive

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Installs the official otterdrive command-line utility from the npm registry.
  • Evidence: npm install --global otterdrive@latest in SKILL.md.
  • [COMMAND_EXECUTION]: Executes shell commands using the otterdrive CLI to manage organizations and artifact lifecycles.
  • Evidence: Usage of subcommands like artifacts create, push, move, and archive in SKILL.md and references/cli.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external artifacts which could contain instructions targeting the agent.
  • Ingestion points: otterdrive artifacts read and otterdrive artifacts pull in SKILL.md.
  • Boundary markers: Instructions mandate using the otterdrive CLI as the sole boundary for storage operations.
  • Capability inventory: Shell execution and global npm package installation.
  • Sanitization: Instructions require the agent to audit files for secrets, credentials, and environment files before uploading content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 02:02 PM