apiiro-risks
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill ingests data from the Apiiro platform via CLI commands, such as
apiiro risks. This data originates from external sources, creating a potential surface for indirect prompt injection if the ingested risk findings contain malicious instructions. - Ingestion points: Data enters the agent's context through the output of
apiiro risksandapiiro risks getcommands in SKILL.md. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are defined for the CLI output.
- Capability inventory: The agent is permitted to execute the
apiiroCLI tool for data retrieval. - Sanitization: There is no explicit sanitization or validation of the CLI output before it is processed by the agent.
Audit Metadata