control-cli
Pass
Audited by Gen Agent Trust Hub on May 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides templates to drive interactive CLIs using
tmuxand Python'sptymodule. These operations are performed locally for testing and debugging purposes. No patterns for arbitrary command injection or unauthorized remote execution were found. - [SAFE]: The skill specifies guardrails that prevent the use of credentials, destructive commands, or hard-coded paths from other repositories. It also instructs the user to clean up temporary sessions and files.
- [PROMPT_INJECTION]: A potential surface for indirect prompt injection exists because the skill reads and acts upon terminal output to synchronize input. This represents a functional surface documented for awareness but is assessed as safe given the local testing context and manual harness creation.\n
- Ingestion points: Terminal output captured via
tmux capture-paneor Pythonos.readas described inSKILL.md.\n - Boundary markers: Absent.\n
- Capability inventory:
tmux send-keys,subprocess.Popen, andos.write(interaction with local processes).\n - Sanitization: Absent.
Audit Metadata