otterdrive
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Installs the official
otterdrivecommand-line utility from the npm registry. - Evidence:
npm install --global otterdrive@latestinSKILL.md. - [COMMAND_EXECUTION]: Executes shell commands using the
otterdriveCLI to manage organizations and artifact lifecycles. - Evidence: Usage of subcommands like
artifacts create,push,move, andarchiveinSKILL.mdandreferences/cli.md. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external artifacts which could contain instructions targeting the agent.
- Ingestion points:
otterdrive artifacts readandotterdrive artifacts pullinSKILL.md. - Boundary markers: Instructions mandate using the
otterdriveCLI as the sole boundary for storage operations. - Capability inventory: Shell execution and global npm package installation.
- Sanitization: Instructions require the agent to audit files for secrets, credentials, and environment files before uploading content.
Audit Metadata