tea-cli
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents how to fetch and process data from Gitea instances (e.g., issues, pull requests, and wiki pages) using the
teaCLI. This creates a surface for indirect prompt injection where malicious content in those remote sources could attempt to influence the agent's behavior.\n - Ingestion points: Remote content retrieved via
tea issues,tea pulls, andtea wikicommands.\n - Boundary markers: None present in the instructions.\n
- Capability inventory: Full
teaCLI functionality including repository management, admin actions, and file writing.\n - Sanitization: Not specified.\n- [COMMAND_EXECUTION]: The skill provides comprehensive documentation for the
teaCLI, enabling the agent to perform complex operations such as managing secrets (tea actions secrets), user administration (tea admin), and repository migrations.\n- [EXTERNAL_DOWNLOADS]: The documentation provides instructions for installing theteaCLI from official Gitea infrastructure, includingdl.gitea.comandgitea.com.
Audit Metadata