mcloud-variables
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from environment variables which could potentially contain untrusted content if modified by external actors.
- Ingestion points: Data enters the context through
mcloud variables listandmcloud variables getcommand outputs as described inSKILL.md. - Boundary markers: The skill instructs the agent to use
--jsonoutput, providing a structured format for data processing. - Capability inventory: Tool access is strictly limited to
mcloudandjqbash commands defined in the YAML frontmatter. - Sanitization: The skill utilizes
jqfor parsing and selecting specific data fields from the command output.
Audit Metadata