linode-cli
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation for the official Linode command-line interface. All external links point to official Linode, Akamai, or GitHub repositories associated with the vendor. Installation instructions use the standard Python package manager (pip) for the official
linode-clipackage. The skill also explicitly promotes secure practices, such as rotating API tokens and using environment variables for authentication.\n- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of data from the Linode API, creating a potential surface for indirect prompt injection if external data (such as resource labels or tags) is maliciously crafted.\n - Ingestion points: Data enters the agent's context through shell command outputs from the
linode-clitool (SKILL.md).\n - Boundary markers: The documentation examples do not include explicit boundary markers or instructions to ignore embedded commands in the CLI output.\n
- Capability inventory: The skill uses
pip3for package management andlinode-cli,jq, andopensslfor infrastructure operations (SKILL.md).\n - Sanitization: Examples include the use of
jq -rfor structured data extraction and shell variable quoting, which are standard practices for mitigating injection risks in automated scripts.
Audit Metadata