dino-manage-boxes

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill interacts with the user's environment via the Bash tool to run the dino CLI for box management tasks such as listing, creating, renaming, and merging card boxes.
  • [SAFE]: The instructions mandate treating all user-provided data (paths, descriptions, colors) as untrusted input and restrict command execution to the specific dino binary.
  • [SAFE]: A safety-first workflow is enforced, requiring the use of --dry-run to preview changes and obtaining explicit user confirmation before any destructive or write operations are finalized.
  • [SAFE]: Proper credential management is encouraged by forbidding the sharing of authentication tokens in chat and instead directing users to use environment variables or standard input for the CLI.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 12:07 PM
Security Audit — agent-trust-hub — dino-manage-boxes