wuji-cli-base
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
wujiCLI to perform hardware operations, including scanning for devices and reading/writing device parameters. - [EXTERNAL_DOWNLOADS]: The
wuji updatecommand enables the retrieval and installation of updated CLI binaries from the vendor. - [PERSISTENCE]: The
wuji completionscommand generates and saves scripts to the user's shell completion directory, ensuring the tool's integration remains active across shell sessions. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external physical hardware, which is then processed by the agent.
- Ingestion points: Sensor data and device configuration parameters are read via the
wuji getandwuji subcommands inSKILL.md. - Boundary markers: The instructions favor using
--jsonand--jsonlflags for structured data output, though they lack explicit safety delimiters for the LLM. - Capability inventory: The skill has the ability to write configuration data back to the hardware via the
wuji setcommand inSKILL.md. - Sanitization: Data is retrieved in structured formats like JSON, providing inherent schema separation.
Audit Metadata