terra-vantage
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation provides commands to download and install the Terra CLI using
curl -fsSL https://cli.tryterra.co/install.sh | shandirm "https://cli.tryterra.co/install.ps1" | iex. These resources are hosted on the vendor's official domain ('tryterra.co') and represent legitimate installation methods for the required development tools. - [COMMAND_EXECUTION]: The skill instructions involve executing Terra CLI commands such as
terra examples cloneandterra environments retrieve-api-keyto manage the integration. These commands are standard functional requirements for using the vendor's platform. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external diagnostic data in FHIR format.
- Ingestion points: Test results are fetched in FHIR JSON format from
GET /api/v1/results/{order_item_id}. - Boundary markers: The documentation does not specify explicit delimiters for the returned data content, though it defines the expected data structure.
- Capability inventory: The skill provides API routing and documentation; it does not execute scripts or system commands based on the contents of the fetched results.
- Sanitization: The skill references the FHIR standard and provides specific interpretation codes (N, L, H, HH, LL) which act as structural validation for the expected data.
Audit Metadata