sentisense-cli
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and executes the
sentisensepackage from the NPM registry usingnpx. The skill explicitly pins the version to0.47.1to ensure the execution of immutable, reviewed code.- [COMMAND_EXECUTION]: Utilizes shell commands for market data retrieval, authentication configuration, and data processing with tools likejq.- [INDIRECT_PROMPT_INJECTION]: - Ingestion points: User-provided stock tickers and query parameters (e.g.,
<tickers...>,--filter) are used as arguments for the CLI tool. - Boundary markers: None explicitly defined in the instructions; the agent relies on the CLI's internal argument parsing.
- Capability inventory: The skill triggers subprocess execution through
npxand writes configuration data to~/.config/sentisense/. - Sanitization: Not explicitly defined; the tool expects standard stock tickers as input.
Audit Metadata