siteos-cli
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill specifies the installation of the
@siteoshq/cliand@siteoshq/formspackages from the npm registry. These are vendor-provided tools used for project management and deployment. - [COMMAND_EXECUTION]: The agent is instructed to run CLI commands via
npxandnpm. The skill documentation explicitly advises against usingsudofor resolving permission issues, promoting safer local environment management. - [INDIRECT_PROMPT_INJECTION]: The skill defines workflows for processing user-supplied files and external data, such as SEO audits and form deployment scripts.
- Ingestion points: Subcommands that read local source files (e.g.,
forms deploy --source,storage upload) or remote content (e.g.,search crawl preview). - Boundary markers: The instructions mandate the use of the
--jsonflag for agent interactions to ensure structured and predictable output, and prohibit printing sensitive tokens or.envcontent. - Capability inventory: The CLI tool facilitates file system modifications, network requests, and authentication state management.
- Sanitization: The skill relies on the CLI's internal validation mechanisms for input files and provides clear rules for the separation of private state and environment overrides.
Audit Metadata