dida365-cli
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation and use of the
dida365-ai-toolspackage from the author's repository via npm or npx. - [COMMAND_EXECUTION]: The skill operates by executing the
dida365CLI command to perform task management, tag manipulation, and synchronization operations. - [INDIRECT_PROMPT_INJECTION]: The skill reads task titles, descriptions, and project data from Dida365, which constitutes a potential attack surface for indirect prompt injection.
- Ingestion points: Task and project data retrieved via
dida365 sync all,dida365 task show, anddida365 project showcommands. - Boundary markers: No explicit delimiters or instructions for the agent to ignore embedded content are present in the skill instructions.
- Capability inventory: The skill has the ability to execute shell commands, perform network operations to
api.dida365.com, and modify or delete tasks and projects. - Sanitization: The documentation does not specify sanitization or validation of the content retrieved from the service.
Audit Metadata