redis-cli
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides extensive examples of shell commands using
redis-cliand standard Unix utilities likecat,grep,wc, andwhileloops for automation. - Evidence: Found throughout
SKILL.mdand reference files, such as scanning keys and inspecting types in a loop. - [PRIVILEGE_ESCALATION]: The installation guide includes commands that use
sudofor system package managers. - Evidence:
SKILL.mdprovidessudo apt installandsudo yum installinstructions. - [DYNAMIC_EXECUTION]: The skill documents the use of Redis Lua scripting and the Redis Functions API for server-side logic.
- Evidence:
references/advanced-features.mdcontains syntax and examples forredis-cli --evalandFUNCTION LOAD. - [INDIRECT_PROMPT_INJECTION]: The skill outlines workflows that ingest data from Redis server outputs and external files, which constitutes a potential injection surface for the agent.
- Ingestion points:
redis-clicommand output (including theMONITORstream) and data piped from external files using-xor-Xflags. - Boundary markers: The documentation suggests using standard shell quoting and explicitly mentions
--rawversus--no-rawoutput modes. - Capability inventory: The skill utilizes file system writes via redirection, network communication via
redis-clihost/port configuration, and server-side script execution. - Sanitization: Provides instructions for string quoting and escaping to handle binary-safe data.
Audit Metadata