dino-auth
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute local CLI commands for authentication management and session status verification.
- [INDIRECT_PROMPT_INJECTION]: The agent is instructed to summarize output from the
dino auth statuscommand, which presents an attack surface if the CLI output were to contain malicious instructions. - Ingestion points: The Workflow section of
SKILL.mdreads and summarizes the JSON output fromdino auth status --format json. - Boundary markers: No specific delimiters are used to wrap or isolate the tool's output from the rest of the prompt context.
- Capability inventory: The skill has access to shell command execution through the
Bashtool, including authentication and logout operations. - Sanitization: There is no evidence of sanitization or validation performed on the CLI output before it is summarized by the agent.
Audit Metadata