openydt-record
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions facilitate interaction with the local
openydtCLI binary to perform parking-related operations. These commands are restricted to theparkingdomain (e.g.,openydt parking get-car-in-list,openydt parking lock-car) and include explicit requirements for user confirmation (--yesflags) for write operations. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface typical of data-management tools, where output from read commands is used as input for write commands. This is documented as a functional requirement for the business flow.
- Ingestion points: Data is ingested through query commands like
get-park-on-site-car,get-car-in-list, andget-car-arrearage-listas described inSKILL.mdandreferences/flows.md. - Boundary markers: The instructions lack explicit delimiters for variable interpolation, although they mandate using output values (like
parkingCodeorrecordId) from read commands as inputs for subsequent actions. - Capability inventory: The skill has the capability to modify records, lock/unlock vehicles, and cancel arrears using the
openydtCLI tool. - Sanitization: No specific sanitization or validation steps are outlined for the data returned by the CLI before it is processed by the agent.
Audit Metadata