Skills
Navigate
skills/sepehr071/iran-mcp/okala/Gen Agent Trust Hub

okala

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill instructs the user to run uvx okala-mcp to install the required MCP server, which executes a third-party package.
  • [EXTERNAL_DOWNLOADS]: The package okala-mcp is downloaded from external sources during setup.
  • [CREDENTIALS_UNSAFE]: Use of ok_login and ok_login_verify involves handling user phone numbers and SMS verification codes, which are stored as local session data.
  • [INDIRECT_PROMPT_INJECTION]: The ok_store_reviews tool retrieves customer reviews from the service, which could contain malicious text intended to manipulate the agent's behavior. 1. Ingestion points: Customer reviews via ok_store_reviews. 2. Boundary markers: None. 3. Capability inventory: Local file storage and shell command execution. 4. Sanitization: None described.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 05:31 AM