stackbone-cli
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various subcommands of the
stackboneCLI tool to manage project lifecycles. This includes initializing workspaces (stackbone init), adding components (stackbone add), running local development environments (stackbone dev), and publishing artifacts (stackbone publish). These operations are consistent with the tool's intended use for software development. - [EXTERNAL_DOWNLOADS]: The skill mentions downloading and installing software packages using
npm,pnpm, andnpx. Referenced packages include@stackbone/cli,@stackbone/sdk, and several@langchainlibraries. These resources are from established vendors or well-known open-source projects and are retrieved from standard package registries. - [INDIRECT_PROMPT_INJECTION]: The skill's architecture involves ingesting data from external files and user-provided inputs, creating a potential surface for indirect prompt injection if untrusted content is processed.
- Ingestion points: Data is brought into the environment via commands like
stackbone rag ingest <path>,stackbone config set --file <path>, andstackbone prompts create --file <path>(referenced inreferences/rag.md,references/config.md, andreferences/prompts.md). - Boundary markers: The provided instructions do not specify the use of delimiters or 'ignore' instructions when handling the content of these ingested files.
- Capability inventory: The skill enables broad capabilities including file system access, network communication with a control plane, and the execution of shell commands.
- Sanitization: The documentation does not describe explicit sanitization or validation steps for the content of processed documents prior to ingestion into the agent's context.
Audit Metadata