audit-agentic-cli
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes output from external CLI commands which serves as an ingestion point for untrusted data.\n
- Ingestion points: The
scripts/audit-cli-help.shscript captures stdout and stderr from target CLI commands (e.g., help text and version info) in theTOP_HELPandsub_helpvariables.\n - Boundary markers: The script does not use specific delimiters or protective instructions when presenting the captured CLI output to the agent in the final report.\n
- Capability inventory: The skill has the capability to execute system commands via bundled shell scripts.\n
- Sanitization: No sanitization or filtering is applied to the captured text to prevent embedded instructions from influencing agent behavior.\n- [COMMAND_EXECUTION]: The bundled scripts execute system commands to perform audits.\n
- Evidence:
scripts/audit-cli-help.shuses arun_capturefunction to execute user-specified CLI commands with--helpand--versionflags.\n- [EXTERNAL_DOWNLOADS]: The skill installation instructions reference external resources from the author's repository.\n - Evidence:
README.mdprovides commands to download the skill and related packs fromgithub.com/yigitkonur/skills-by-yigitkonur.
Audit Metadata