iot-fleet
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and executes the
@claude-flow/plugin-iot-cognitumpackage from the NPM registry using thenpxutility at runtime. - [COMMAND_EXECUTION]: Functions by executing shell commands to interact with the Cognitum IoT fleet management service.
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection (specifically command injection) because it interpolates user-supplied arguments directly into bash execution strings.
- Ingestion points: Subcommand arguments such as
NAME,FLEET_ID, andDEVICE_IDdefined inSKILL.md. - Boundary markers: No delimiters or warning instructions are present to separate user input from the command structure.
- Capability inventory: Employs the
Bashtool to execute all operations, including those incorporating user input. - Sanitization: The skill does not specify any sanitization, escaping, or validation logic for the input arguments before they are passed to the shell environment.
Audit Metadata