add-new-model
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches model lists from official provider endpoints (OpenAI, Anthropic, xAI, Google, Groq) to verify model existence.
- [COMMAND_EXECUTION]: Uses local tools like
git,rg,uv, andmaketo analyze the codebase, identify required changes, and run tests. - [INDIRECT_PROMPT_INJECTION]: The skill ingests a user-provided
model idwhich is then interpolated into shell commands and Python scripts for capability probing and SDK checks. - Ingestion points: User input for
providerandmodel idat the start of the workflow. - Boundary markers: The instructions do not explicitly define delimiters for the
model idwhen used in subsequent shell or Python execution contexts. - Capability inventory: The skill utilizes
Bash,Write,Edit, andWebFetchcapabilities. - Sanitization: A validation step is included (Step 1) that verifies the user-provided ID against official provider listings before proceeding, acting as a safeguard.
- [DYNAMIC_EXECUTION]: Instructions guide the agent to generate and run a local Python script (
local-notes/probe_<model>.py) to compare model capabilities.
Audit Metadata