terra-vantage

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation provides commands to download and install the Terra CLI using curl -fsSL https://cli.tryterra.co/install.sh | sh and irm "https://cli.tryterra.co/install.ps1" | iex. These resources are hosted on the vendor's official domain ('tryterra.co') and represent legitimate installation methods for the required development tools.
  • [COMMAND_EXECUTION]: The skill instructions involve executing Terra CLI commands such as terra examples clone and terra environments retrieve-api-key to manage the integration. These commands are standard functional requirements for using the vendor's platform.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external diagnostic data in FHIR format.
  • Ingestion points: Test results are fetched in FHIR JSON format from GET /api/v1/results/{order_item_id}.
  • Boundary markers: The documentation does not specify explicit delimiters for the returned data content, though it defines the expected data structure.
  • Capability inventory: The skill provides API routing and documentation; it does not execute scripts or system commands based on the contents of the fetched results.
  • Sanitization: The skill references the FHIR standard and provides specific interpretation codes (N, L, H, HH, LL) which act as structural validation for the expected data.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 12:15 AM