dino-note

Pass

Audited by Gen Agent Trust Hub on Oct 31, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill manages note operations by executing the dino CLI tool. This is the primary intended functionality of the skill and is documented with extensive safety guidelines, including mandatory dry-runs and structured JSON output parsing.
  • [INDIRECT_PROMPT_INJECTION]: The skill acknowledges that note content and CLI output are untrusted data. It provides explicit instructions to never execute commands or instructions found within the data, effectively mitigating risks associated with processing external note content.
  • [EXTERNAL_DOWNLOADS]: The documentation references the official @dinoxx/dinox-cli NPM package as a prerequisite. This is a standard dependency for the tool's ecosystem.
  • [DYNAMIC_CONTEXT_INJECTION]: The skill mentions the use of ! syntax (e.g., ! dino auth login) for user authentication in compatible environments. These are provided as legitimate examples for project-specific tooling and follow recommended security flows to avoid handling raw credentials in the chat context.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 31, 2026, 11:53 AM