code-engine-update
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to interact with the environment via the
community-domo-clitool to perform package updates and versioning. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from local files which could influence agent behavior if the files contain malicious instructions.
- Ingestion points: The agent is instructed to read from
payload.jsonfor package bodies andmanifest.jsonfor mapping synchronization. - Boundary markers: There are no specific boundary markers or instructions to disregard embedded commands within these files provided in the skill.
- Capability inventory: The skill utilizes shell execution (
community-domo-cli) and makes authenticated API requests (POST,PUTto Domo endpoints). - Sanitization: The instructions do not specify validation, filtering, or sanitization steps for the data read from external files before using them as command arguments or request bodies.
Audit Metadata