ouroboros-config
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands via the
run_shellcapability to manage theouroborosCLI. In Branch B, it includes a command that binds a web server to0.0.0.0, which exposes the configuration interface to all network interfaces on the host. - [EXTERNAL_DOWNLOADS]: The instructions include a fallback to use
uvxfor downloading and executing theouroboros-aipackage from the Python Package Index (PyPI) if the tool is not locally available. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user input to define configuration values (such as model IDs or agent roles) and interpolates these into shell commands (e.g.,
ouroboros config set <key> <value>). This creates a surface where unvalidated user input could attempt to influence the shell command execution, although the skill instructions mention using a validated setter.
Audit Metadata