community-cli-howto
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and installs the
community-domo-clitool from the author's GitHub repository (github.com/stahura/community-domo-cli.git) and theryuupackage from the NPM registry. - [COMMAND_EXECUTION]: Provides instructions for executing shell commands to perform data operations, including listing datasets, querying SQL, and uploading/downloading files via the CLI.
- [INDIRECT_PROMPT_INJECTION]: The skill enables the agent to process data returned from external Domo API endpoints (datasets, file content, appdb documents), which introduces a potential ingestion surface for instructions embedded in remote data.
- Ingestion points: CLI output from
datasets,appdb,workflows, andfilesetscommands. - Boundary markers: None present in the skill instructions.
- Capability inventory: Network access (via CLI tool) and local file writing (
filesets download). - Sanitization: Not explicitly defined; the skill relies on the agent's default handling of command output.
Audit Metadata