jo
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides documentation for installing the
joutility from official package repositories and the project's GitHub repository (github.com/jpmens/jo). The instructions target a well-known open-source tool and follow standard installation procedures. - [COMMAND_EXECUTION]: The instructions involve executing the
jocommand-line utility, along withcurlandkubectl, for constructing and sending JSON payloads. These examples are for legitimate developer workflows. - [INDIRECT_PROMPT_INJECTION]: The skill identifies a pattern for processing shell variables into JSON payloads, representing a standard surface for data processing.
- Ingestion points: User-defined shell variables such as
$NAME,$EMAIL, and$TOKENare interpolated intojocommands within the examples in SKILL.md. - Boundary markers: No specific boundary markers are used for input variables, but
joitself serves as a structural boundary for the resulting JSON. - Capability inventory: Shell execution of
jo,curl, andkubectlas documented in SKILL.md. - Sanitization: The primary purpose of the skill is to use
joas a sanitization layer, ensuring that user-provided variables are correctly quoted and escaped to prevent structural JSON injection.
Audit Metadata