tigris-object-operations
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions in
SKILL.mddirect the agent to install the official@tigrisdata/clipackage globally via npm. This is a verified vendor-owned resource for Tigris Data. - [COMMAND_EXECUTION]: The skill utilizes command-line checks such as
tigris helpto verify environment readiness and executes installation commands to ensure required vendor tools are available. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it retrieves content from external storage via the
getoperation inSKILL.md. This constitutes an ingestion point for untrusted data; however, the risk is managed by standard agent safety protocols as no safety overrides are present.
Audit Metadata