dino-storage
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the system using the Bash tool to execute dino CLI commands for storage management, including configuration listing, connectivity testing, and file uploads.
- [PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection because it processes untrusted data from command outputs and local files.
- Ingestion points: Reads output from dino storage list, dino storage test, and dino storage stats, and accepts file paths for upload (SKILL.md).
- Boundary markers: None defined; data is processed directly as command output.
- Capability inventory: Can execute arbitrary shell commands via Bash and write files via the Write tool (SKILL.md).
- Sanitization: Proactively validates object keys to exclude dot-only segments ('.' and '..'), mitigating path normalization attacks (SKILL.md).
- [SAFE]: The skill design incorporates significant safety controls, such as forbidding the display of secret keys, requiring dry-runs for write operations, and mandating user confirmation before overwriting remote data (SKILL.md).
Audit Metadata