skills/q00/ouroboros/ouroboros-config/Gen Agent Trust Hub

ouroboros-config

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands via the run_shell capability to manage the ouroboros CLI. In Branch B, it includes a command that binds a web server to 0.0.0.0, which exposes the configuration interface to all network interfaces on the host.
  • [EXTERNAL_DOWNLOADS]: The instructions include a fallback to use uvx for downloading and executing the ouroboros-ai package from the Python Package Index (PyPI) if the tool is not locally available.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user input to define configuration values (such as model IDs or agent roles) and interpolates these into shell commands (e.g., ouroboros config set <key> <value>). This creates a surface where unvalidated user input could attempt to influence the shell command execution, although the skill instructions mention using a validated setter.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 11:31 AM