ctx-cloud-status
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
catcommand to read configuration and sync statistics from~/.context-mode/sync.jsonand~/.context-mode/sync-stats.json. This access is required for its primary function. - [EXTERNAL_DOWNLOADS]: Initiates a network health check using
curlto a remote API endpoint. The request is authenticated but targets the official service domain. - [CREDENTIALS_UNSAFE]: While the skill handles an API token, it includes specific instructions for the agent to mask the token (e.g.,
ctx_****abcd) before displaying it in the status report, preventing sensitive data exposure. - [PROMPT_INJECTION]: The skill processes external data from local configuration files, creating an indirect prompt injection surface.
- Ingestion points:
~/.context-mode/sync.jsonand~/.context-mode/sync-stats.json. - Boundary markers: None present for the ingested data.
- Capability inventory: File system access via
catand network access viacurl. - Sanitization: Sensitive API tokens are masked before being output to the conversation.
Audit Metadata