working-with-tilebox-automations
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is authored by 'tilebox' and documents the use of official vendor resources, including the
tileboxCLI and thetileboxPython library. - [SAFE]: Credential management follows secure patterns by referencing the
$TILEBOX_API_KEYenvironment variable instead of using hardcoded secrets. - [SAFE]: Command execution is limited to the official
tileboxutility for listing, inspecting, and submitting automation tasks. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests untrusted data from automation trigger definitions and job logs via the CLI. However, this is inherent to the skill's primary purpose of workflow management.
- Ingestion points: External data enters through
tilebox automation list,tilebox automation get, andtilebox job logsoutput. - Boundary markers: None identified in the provided instructions.
- Capability inventory: Subprocess execution via the
tileboxCLI (tilebox job submit). - Sanitization: No specific input validation or sanitization logic is described for handling external data.
Audit Metadata