skills/ohdearapp/ohdear-cli/ohdear/Gen Agent Trust Hub

ohdear

Pass

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill's core functionality relies on executing the ohdear command-line interface to interact with the Oh Dear API for tasks like listing monitors, retrieving metrics, and managing status pages.
  • [EXTERNAL_DOWNLOADS]: The skill documentation recommends the installation of the official ohdearapp/ohdear-cli package from the Composer registry to enable the CLI functionality.
  • [PROMPT_INJECTION]: The skill identifies and processes data from external sources, including parameters extracted from ohdear.app URLs and documentation content fetched from the service's website.
  • Ingestion points: Monitor IDs and check types are extracted from user-provided URLs in SKILL.md; documentation is fetched in markdown format from https://ohdear.app/docs/ as described in SKILL.md.
  • Boundary markers: Absent; there are no instructions to use delimiters or ignore embedded instructions when the agent processes data from URLs or documentation.
  • Capability inventory: Extensive administrative control over monitoring resources, including CRUD operations for monitors and maintenance periods, as detailed in references/commands.md.
  • Sanitization: Absent; the instructions do not include steps to sanitize or validate extracted URL parameters before they are passed to the CLI shell commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 24, 2026, 11:11 AM