terra-models
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing official vendor tools, including the Terra API CLI via
npm install -g @tryterra/cliandbrew install tryterra/tap/terra. It also references documentation on thetryterra.codomain. - [INDIRECT_PROMPT_INJECTION]: The skill describes a workflow for fetching and processing wellness data from the Terra API. While this involves ingesting external data, the skill provides specific instructions for handling response objects which helps constrain how the agent interprets the output.
- Ingestion points: API responses from
api.tryterra.coas described inSKILL.md. - Boundary markers: The skill provides logical structures for parsing specific keys (
unsupported,no_data,window) to help the agent interpret data correctly. - Capability inventory: Network operations via
curlto the vendor's API endpoints. - Sanitization: The skill includes instructions to not present wellness indicators as medical or clinical data.
- [CREDENTIALS_UNSAFE]: The skill uses appropriate placeholders such as
YOUR_API_KEYandYOUR_DEV_IDin example API calls, avoiding the exposure of real credentials.
Audit Metadata