sinch-cli
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates interaction with the official Sinch CLI (
@sinch/cli), a legitimate developer tool for managing cloud communication services. All external resources, including documentation links (developers.sinch.com) and packages, originate from the verified vendor infrastructure. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an ingestion surface through local configuration files like
sinch.jsonand.env. These files are used to interpolate parameters into shell commands. However, the skill mitigates risk by instructing the agent to verify command syntax usingsinch <cmd> --helpand focusing on well-defined CLI parameters, which is standard behavior for development tools. - [CREDENTIALS_UNSAFE]: The skill correctly identifies the risk of hardcoded secrets and explicitly instructs the user and agent to use the
sinch secretscommand to store sensitive data in the OS keychain rather than in source code or environment files.
Audit Metadata