monitor-tasks
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and executes the official vendor-owned
@openant-ai/clipackage from the npm registry usingnpxto facilitate platform interaction.\n- [COMMAND_EXECUTION]: Utilizes theBashtool to run CLI commands for monitoring tasks, notifications, platform statistics, and wallet balances.\n- [PROMPT_INJECTION]: Identifies a potential surface for indirect prompt injection from untrusted content retrieved from the platform.\n - Ingestion points: Task details, notification lists, and platform statistics fetched via CLI commands (documented in SKILL.md).\n
- Boundary markers: No explicit delimiters are used to separate external data from system instructions.\n
- Capability inventory: Subprocess execution through Bash commands for task and notification management.\n
- Sanitization: No evidence of sanitization or validation of content retrieved from the OpenAnt platform.
Audit Metadata