Skills
Navigate
skills/senpi-ai/senpi-skills/senpi-strategy-ops/Gen Agent Trust Hub

senpi-strategy-ops

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes openclaw and git via subprocess.run to manage the strategy lifecycle. Arguments are passed as lists to prevent shell injection, and operations are limited to intended management tasks.
  • [EXTERNAL_DOWNLOADS]: Fetches strategy assets and catalog data from github.com/Senpi-ai/senpi-skills and api.github.com. These are official vendor resources used for package resolution.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: Strategy configuration files are downloaded from GitHub and read from the local workspace in scripts/deploy.py and scripts/_fetch.py.
  • Boundary markers: Uses structured YAML format for strategy manifests.
  • Capability inventory: Executes system commands via _cli.run_cli and performs HTTP requests via mcp_client.py and _fetch.py.
  • Sanitization: Employs a custom stdlib-only YAML safe-loader (scripts/_yaml.py) and performs path validation to prevent traversal during file extraction.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 05:20 PM