pico-cli-device-target
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
pico-cli, a vendor-specific command-line utility, to list and inspect device properties. These commands are necessary for the skill's core functionality of device identification. - [INDIRECT_PROMPT_INJECTION]: The skill processes output from external command-line tools (ingestion point:
pico-clioutput in SKILL.md) to perform its classification task. While boundary markers and sanitization are not explicitly defined, the skill lacks high-risk capabilities like network access or file system modifications, limiting the risk of this ingestion surface.
Audit Metadata