terra-models
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the official Terra CLI via
brew install tryterra/tap/terraandnpm install -g @tryterra/cli. These are legitimate tools provided by the service vendor.\n- [COMMAND_EXECUTION]: The skill includes examples of using theterraCLI andcurlto interact with API endpoints. These examples use placeholders for sensitive parameters such as API keys and developer IDs.\n- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the retrieval of wellness insights from the Terra API via the/v2/models/runendpoint (SKILL.md). While this involves ingesting external data into the agent's context without explicit boundary markers or sanitization, the data consists of structured physiological metrics from the vendor's API, and the skill lacks dangerous capabilities like file writing or arbitrary execution.
Audit Metadata