skills/pachca/openapi/pachca-chats/Gen Agent Trust Hub

pachca-chats

Pass

Audited by Gen Agent Trust Hub on Mar 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to download and execute the @pachca/cli package from the NPM registry. This is the official command-line tool for the Pachca platform.
  • [COMMAND_EXECUTION]: The skill executes shell commands using the pachca CLI and npx to perform chat management tasks such as creating, updating, and archiving chats.
  • [PROMPT_INJECTION]: The skill processes untrusted data from chat channels and conversations, creating an attack surface for indirect prompt injection.
  • Ingestion points: Data retrieved from pachca chats list and exported chat content.
  • Boundary markers: None identified; there are no instructions to the agent to ignore or delimit embedded instructions in the ingested chat data.
  • Capability inventory: The skill allows for creating messages, modifying chat members, and archiving conversations.
  • Sanitization: No evidence of sanitization or filtering of incoming chat data is provided.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 17, 2026, 02:44 AM
Security Audit — agent-trust-hub — pachca-chats