suprsend-cli
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to facilitate the execution of the
suprsendcommand-line utility for managing notification resources such as workflows, templates, and categories. - [PERSISTENCE]: Documentation for shell completions includes instructions for persisting configuration by modifying shell profiles (e.g.,
~/.zshrc) and system-wide completion directories (e.g.,/etc/bash_completion.d/). These are standard procedures for enabling CLI autocompletion. - [PRIVILEGE_ESCALATION]: Instructions for installing bash completions on Linux recommend writing to
/etc/bash_completion.d/, a process that generally requires administrative (root) access. - [INDIRECT_PROMPT_INJECTION]: The skill pulls data (templates, workflows, schemas) from remote SuprSend workspaces. If these remote resources were to contain malicious instructions, they could potentially influence the agent's behavior when the data is read or processed locally.
- Ingestion points: Workspace data pulled via
suprsend workflow pull,suprsend template pull, etc. - Boundary markers: Not explicitly mentioned in the CLI help documentation.
- Capability inventory: File writes (
--dir), network operations (API sync), and shell command execution (suprsend). - Sanitization: Relies on the user's/agent's interpretation of the pulled JSON/YAML content.
- [EXTERNAL_DOWNLOADS]: The CLI tool performs network operations to interact with SuprSend's official API endpoints (
hub.suprsend.comandmanagement-api.suprsend.com) for asset synchronization and management.
Audit Metadata