skills/pixel-point/siteos/siteos-cli/Gen Agent Trust Hub

siteos-cli

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill specifies the installation of the @siteoshq/cli and @siteoshq/forms packages from the npm registry. These are vendor-provided tools used for project management and deployment.
  • [COMMAND_EXECUTION]: The agent is instructed to run CLI commands via npx and npm. The skill documentation explicitly advises against using sudo for resolving permission issues, promoting safer local environment management.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines workflows for processing user-supplied files and external data, such as SEO audits and form deployment scripts.
  • Ingestion points: Subcommands that read local source files (e.g., forms deploy --source, storage upload) or remote content (e.g., search crawl preview).
  • Boundary markers: The instructions mandate the use of the --json flag for agent interactions to ensure structured and predictable output, and prohibit printing sensitive tokens or .env content.
  • Capability inventory: The CLI tool facilitates file system modifications, network requests, and authentication state management.
  • Sanitization: The skill relies on the CLI's internal validation mechanisms for input files and provides clear rules for the separation of private state and environment overrides.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 10:25 PM