tilebox-cli
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches installation and setup scripts from the author's verified infrastructure at install.tilebox.com.
- [REMOTE_CODE_EXECUTION]: Provides instructions for installing the CLI by piping remote scripts to the shell (curl -fsSL ... | sh). These scripts originate from the vendor's own domain.
- [COMMAND_EXECUTION]: Utilizes various tilebox CLI commands and jq for workflow automation and data manipulation.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external information through documentation searches and command outputs, creating a potential injection surface. 1. Ingestion points: tilebox command outputs (JSON) and tilebox docs search results. 2. Boundary markers: Absent. 3. Capability inventory: Execution of tilebox CLI commands and jq. 4. Sanitization: Absent; relies on structured output formats.
Audit Metadata