ctx
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
ctx-clibinary from the officialtabnine/skillsGitHub repository during the setup phase. - [COMMAND_EXECUTION]: Executes shell scripts to configure the CLI, manage permissions with
chmod +x, and perform version checks against GitHub's API. - [COMMAND_EXECUTION]: Provides access to the
ctx-clitool via bash, allowing the agent to query a knowledge graph and manage security vulnerability remediation. - [PROMPT_INJECTION]: Exposes a surface for indirect prompt injection via the processing of untrusted security vulnerability data.
- Ingestion points:
get_cve_resolution_statusinsecurity.mdandfind_entitiesincodebase-search.mdingest content from an external knowledge graph and security scanners. - Boundary markers: No delimiters or explicit instructions to ignore embedded commands are present in the documentation for handling tool outputs.
- Capability inventory: The skill has execution capabilities via
Bash(ctx-cli:*)and instructs the agent to handle code diffs provided by the service. - Sanitization: No documentation exists regarding the sanitization or validation of the
recommendedActiondiffs returned by the API.
Audit Metadata