10x-cli-setup
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard environment inspection commands such as
command -vand utility commands usingnpmand the10xCLI to manage configurations and tool state.\n- [EXTERNAL_DOWNLOADS]: Fetches package metadata from the NPM registry and downloads skill assets from the vendor's official GitHub repository (przeprogramowani/10x-cli) using a pinned version of theskillsinstaller.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests outputs from diagnostic tools and local configuration files to determine the readiness of the setup.\n - Ingestion points: Output from diagnostic commands (e.g.,
doctor --json,auth --status) and project manifest files (e.g.,.10x-cli.json).\n - Boundary markers: Not utilized for tool outputs, but the skill provides strict logical checks for interpreting diagnostic results.\n
- Capability inventory: Includes the execution of shell commands through
npm/npxand file system modifications via the10xCLI.\n - Sanitization: No explicit sanitization is performed on tool outputs, but the skill follows a cautious workflow with manual verification steps.
Audit Metadata