soia-env-pi-cli-install
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/inspect_cli.pyexecutes diagnostic commands includingpi --versionandpi --helpto verify the application's runtime status. It also queries the npm global environment usingnpm prefixandnpm rootto identify installation paths. These operations are restricted to non-destructive verification tasks and include input validation for command names. - [EXTERNAL_DOWNLOADS]: The
scripts/check_latest.pyscript retrieves version metadata from trusted and well-known services, including the npm registry (registry.npmjs.org) and the GitHub API. These network requests are limited to fetching JSON-formatted metadata for version comparison and do not involve direct execution of remote content. - [PROMPT_INJECTION]: The skill ingests data from external registries and command-line outputs. It mitigates indirect prompt injection risks by applying a strict regular expression filter (
VERSION_RE) and string normalization to all version data before it is presented to the agent or the user, ensuring that untrusted content cannot manipulate agent behavior.
Audit Metadata