pegasus-projects
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
pegasusCLI to perform project management tasks, such aspegasus projects list,create,update, andshow. These commands are used to interact with the SaaS Pegasus API for project configuration. - [SAFE]: The skill checks for existing credentials in standard locations such as
~/.pegasus/credentialsor thePEGASUS_API_KEYenvironment variable. This is documented as the legitimate authentication method for the Pegasus CLI and does not involve exfiltration to unknown domains. - [PROMPT_INJECTION]: The skill includes a surface for indirect prompt injection via the ingestion of configuration files.
- Ingestion points: The agent can load configuration data from local YAML or JSON files using the
--config-fileflag as described in theCommandssection ofSKILL.md. - Boundary markers: Instructions explicitly mandate the use of the
--jsonflag for CLI output to ensure the agent processes structured data rather than potentially truncated or formatted human-readable text. - Capability inventory: The skill is restricted to project configuration management commands within the
pegasusCLI, including creating and updating project settings. - Sanitization: Input validation for fields like
project_slugand choice-type fields is handled by the server-side API and the CLI tool, which rejects invalid identifiers or unauthorized feature selections based on the user's license tier.
Audit Metadata