terra-models

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the official Terra CLI via brew install tryterra/tap/terra and npm install -g @tryterra/cli. These are legitimate tools provided by the service vendor.\n- [COMMAND_EXECUTION]: The skill includes examples of using the terra CLI and curl to interact with API endpoints. These examples use placeholders for sensitive parameters such as API keys and developer IDs.\n- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the retrieval of wellness insights from the Terra API via the /v2/models/run endpoint (SKILL.md). While this involves ingesting external data into the agent's context without explicit boundary markers or sanitization, the data consists of structured physiological metrics from the vendor's API, and the skill lacks dangerous capabilities like file writing or arbitrary execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 12:37 AM