dino-storage
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
dinoCLI tool to perform storage operations such as listing configurations, testing connectivity, and uploading files. - Evidence: Commands like
dino storage list,dino storage test, anddino storage uploadare defined inSKILL.mdas the canonical interface. - [INDIRECT_PROMPT_INJECTION]: The skill manages an attack surface where instructions could be embedded in external filenames or storage provider metadata, but it implements comprehensive mitigations.
- Ingestion points: User-provided file paths, object keys, and structured JSON output from the
dinoCLI (SKILL.md). - Boundary markers: The skill contains explicit instructions to treat all CLI output and note content as untrusted and to never execute instructions found within Dinox data.
- Capability inventory: The skill uses the agent's local process execution capability to run the
dinobinary. - Sanitization: Instructions require strict argument handling to prevent interpolation, rejection of path segments containing
.or.., and the mandatory use of dry-runs before execution.
Audit Metadata