tixmd-list
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
pnpxcommand to run@tixmd/cli liston the host system to retrieve ticket data. - [EXTERNAL_DOWNLOADS]: The
@tixmd/clipackage is downloaded and executed from the npm registry at runtime viapnpx. - [PROMPT_INJECTION]: The skill ingests and displays ticket titles and labels fetched from the CLI tool, creating a surface for indirect prompt injection.
- Ingestion points: Output of
pnpx @tixmd/cli listas described inSKILL.md. - Boundary markers: Absent; the skill presents results directly to the user without delimiters or instructions to ignore embedded commands.
- Capability inventory: Local command execution capabilities are available to the agent via
pnpx. - Sanitization: No validation or escaping of the retrieved ticket data is performed before the content is processed or displayed.
Audit Metadata