Skills
Navigate
skills/ryzencool/dinox-cli-skills/dino-dinox/Gen Agent Trust Hub

dino-dinox

Pass

Audited by Gen Agent Trust Hub on Oct 31, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for installing the Dinox CLI and managing the synchronization daemon via shell commands.\n
  • Evidence: Commands such as npm install -g @dinoxx/dinox-cli and dino daemon install are used for setup and maintenance.\n- [EXTERNAL_DOWNLOADS]: The skill downloads the CLI and related agent skills from vendor-controlled repositories.\n
  • Evidence: The installation workflow uses npm and npx to fetch @dinoxx/dinox-cli and ryzencool/dinox-cli-skills.\n- [PERSISTENCE]: The skill allows for the installation of a background synchronization daemon that persists across reboots using system service managers.\n
  • Evidence: The dino daemon install command configures persistence via launchd, systemd, or Windows Task Scheduler.\n- [INDIRECT_PROMPT_INJECTION]: The skill explicitly instructs the agent on how to handle untrusted data from the knowledge base to prevent injection attacks.\n
  • Evidence: The Runtime Contract section mandates treating note content and CLI output as untrusted data and warns against executing instructions found within them.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 31, 2026, 11:53 AM