ouroboros-config
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
uvxto download and execute theouroboros-ai[tui]package from the Python Package Index (PyPI) if theouroboroscommand is not found in the system PATH. - [COMMAND_EXECUTION]: The skill executes multiple shell commands to manage the system configuration, including
ouroboros config,ouroboros config show, andouroboros config setto modify~/.ouroboros/config.yaml. - [COMMAND_EXECUTION]: In Branch B, the skill instructs the agent to bind a web server to
0.0.0.0, which exposes the configuration interface to all network interfaces on the host machine. While intended for remote access, this increases the attack surface if the network environment is not trusted. - [INDIRECT_PROMPT_INJECTION]: The agent processes and relays output from the
ouroborosCLI tools back to the user, creating a surface where malicious content in configuration files could influence agent behavior. 1. Ingestion points: Output fromouroboros config showand CLI validation error messages. 2. Boundary markers: None explicitly defined for tool output processing. 3. Capability inventory: File system access (reading/writing~/.ouroboros/config.yaml) and network socket creation. 4. Sanitization: The skill relies on the tool's internal validation, but does not specify sanitization of the output before relaying it to the agent's context.
Audit Metadata