dino-manage-boxes

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to interact with the local dino CLI. It includes strong safety instructions, such as performing a --dry-run before any write operation and requiring explicit user confirmation before executing changes to the card boxes.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided data for box paths and descriptions. It mitigates potential injection risks by instructing the agent to treat all such input as untrusted and restricting its use to the dino CLI environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 09:16 AM
Security Audit — agent-trust-hub — dino-manage-boxes