yao-geoflow-cli
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local CLI tools including
bin/geoflowandphp artisanto perform system operations. These actions are restricted to documented operational boundaries and require target confirmation for high-risk tasks. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface by reading and processing output from the GEOFlow Laravel API and admin web pages. Ingestion points:
scripts/geoflow_preflight.shreadscurlresponses. Boundary markers:references/operation-boundary.mddefines explicit rules for data handling and secret redaction. Capability inventory: The skill can execute shell commands, perform file operations, and conduct network requests to the configured base URL. Sanitization:scripts/geoflow_preflight.shimplements regex-based redaction of CSRF tokens and sensitive authentication values using Python. - [DYNAMIC_EXECUTION]: The preflight script executes static Python heredocs for the purpose of validating API response structures and applying security redaction. This use is confined to local data filtering and does not incorporate untrusted executable code.
Audit Metadata