t2000-contacts
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Requires the
@t2000/clipackage, which is fetched via npx. This is a vendor-provided tool intended for contact management. - [COMMAND_EXECUTION]: Instructs the agent to execute shell commands using the
t2000CLI tool to add, remove, and list contacts. - [PROMPT_INJECTION]: The skill processes untrusted input through the 'add' command. Ingestion points: Contact name and address arguments. Boundary markers: None. Capability inventory: Shell command execution (t2000). Sanitization: Implements strict character filtering (letters, numbers, underscores), length constraints (32 chars), and Sui address validation.
Audit Metadata