pachca-chats
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and execute the@pachca/clipackage from the NPM registry. This is the official command-line tool for the Pachca platform. - [COMMAND_EXECUTION]: The skill executes shell commands using the
pachcaCLI andnpxto perform chat management tasks such as creating, updating, and archiving chats. - [PROMPT_INJECTION]: The skill processes untrusted data from chat channels and conversations, creating an attack surface for indirect prompt injection.
- Ingestion points: Data retrieved from
pachca chats listand exported chat content. - Boundary markers: None identified; there are no instructions to the agent to ignore or delimit embedded instructions in the ingested chat data.
- Capability inventory: The skill allows for creating messages, modifying chat members, and archiving conversations.
- Sanitization: No evidence of sanitization or filtering of incoming chat data is provided.
Audit Metadata