lmfdb-cli
Warn
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires installing the
lmfdb-clitool from a third-party Homebrew tap (frankieew/tap). - [EXTERNAL_DOWNLOADS]: The tool includes a command
lmfdb install-browserwhich downloads an external Chromium browser binary from a remote source to the local system. - [COMMAND_EXECUTION]: The skill relies on executing the custom
lmfdbbinary to perform mathematical lookups via the command line. - [COMMAND_EXECUTION]: The CLI tool has the capability to write query results directly to the local filesystem using the
-oflag (e.g., saving to.csvor.jsonfiles). - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface (Category 8) when processing data fetched from the external LMFDB database.
- Ingestion points: Output from
lmfdbCLI commands containing mathematical data. - Boundary markers: None specified to separate database content from agent reasoning.
- Capability inventory: Shell command execution and local filesystem write access.
- Sanitization: No validation or escaping of the external data is described.
Audit Metadata