mac-hotspot-data-saver
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
kilobatCLI tool via an external Homebrew tap (brew install seifip/kilobat/kilobat). This introduces a dependency on software maintained outside of official platform repositories. - [COMMAND_EXECUTION]: The skill relies on executing the
kilobatcommand-line utility to perform network management tasks. Commands used includekilobat status,kilobat report,kilobat profile,kilobat limit, andkilobat block. These commands interact with system-level network settings. - [INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface where it ingests and processes data from external tool outputs to drive its logic.
- Ingestion points: Untrusted data enters the agent context through the output of
kilobat status --json,kilobat report --json,kilobat conditions --json, andkilobat sessions --jsonin SKILL.md. - Boundary markers: No specific boundary markers or instructions are provided to the agent to distinguish between tool data and instructions.
- Capability inventory: The skill includes capabilities for modifying network rules, blocking applications, and changing network profiles.
- Sanitization: There is no evidence of data sanitization or validation performed on the CLI tool output before it is processed by the agent.
Audit Metadata