iot-anomalies
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the latest version of the
@claude-flow/plugin-iot-cognitumpackage from the public NPM registry at runtime usingnpx. - [COMMAND_EXECUTION]: Executes a shell command via
npxto run the anomaly detection tool on device telemetry. - [PROMPT_INJECTION]: Potential for Indirect Prompt Injection as the skill ingests and processes untrusted device telemetry data.
- Ingestion points: Device telemetry data is processed by the
cognitum-iot anomaliescommand (SKILL.md). - Boundary markers: None identified to separate telemetry data from instructions.
- Capability inventory: Uses
Bash(npx *)andmcp__claude-flow__memory_store(SKILL.md). - Sanitization: No explicit sanitization or validation of the telemetry content is described before processing or storage.
Audit Metadata