manage-teams
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and execute@openant-ai/cli@latestfrom the NPM registry. This is a verified vendor resource belonging to the skill author (openant-ai). - [COMMAND_EXECUTION]: Shell commands are used via the Bash tool to interact with the platform. The skill explicitly mitigates risk by instructing the agent to confirm with the user before performing destructive operations like
teams deleteorteams remove-member. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it processes team names and descriptions from external CLI output.
- Ingestion points: Data retrieved from
teams listandteams getcommands inSKILL.md. - Boundary markers: None identified; output is requested in JSON format which provides structure but not instructional isolation.
- Capability inventory: The agent can perform various team management actions via Bash commands.
- Sanitization: No specific content filtering or sanitization of the CLI output is specified.
Audit Metadata