dino-update-cli
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the
@dinoxx/dinox-clipackage from the NPM registry and fetches specific versioned skills from the author's GitHub repository. - [COMMAND_EXECUTION]: Executes administrative commands for global package management and CLI updates, specifically using
dino update,npm install -g, andnpx skills add. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local CLI outputs and provides explicit instructions to the agent to mitigate risks.
- Ingestion points: CLI output from
dino update,dino info, anddino skills doctor(SKILL.md). - Boundary markers: Explicit instructions to use
--format jsonand delimiters for free-form content. - Capability inventory: Subprocess calls for
dino,npm, andnpx(SKILL.md). - Sanitization: Strong instructional constraints requiring the agent to ignore instructions found in CLI data.
Audit Metadata