trylle-cli
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides installation instructions for the
trylle-clibinary using npm, uv, and cargo. These references target official vendor packages (@trylle/trylle-cli, trylle-cli). The update mechanisms, such asnpx skills add trylle-labs/skillsanduvx upd-skill, also point to the official repository of the skill author. - [COMMAND_EXECUTION]: The skill uses the
tryCLI to perform repository operations, secret management, and CI interactions. The documentation includes explicit safety rules, such as discouraging the printing of tokens and recommending the use of environment variables for secret inputs to prevent credential exposure in logs or shell history. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with external content from the Trylle platform (e.g., pull request bodies, issue comments, CI logs), which could contain malicious instructions designed to influence the agent.
- Ingestion points: Commands like
try pr view,try issue view, andtry ci logsingest content from the remote platform (SKILL.md, references/workflows.md). - Boundary markers: The skill instructs the agent to use the
--jsonflag for structured data parsing and to verify command arguments using--helpbefore execution. - Capability inventory: The skill allows for repository modification, secret updates, and pull request management across its command set.
- Sanitization: Instructions advise using
--body-fileand temporary environment variables for complex or sensitive inputs to maintain separation between instructions and data.
Audit Metadata