ov-search-context

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the ov CLI tool to perform various database operations, including listing resources (ov ls), searching via semantic find (ov find), and reading full file contents (ov read). These commands are necessary for the skill's core functionality.
  • [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it retrieves and processes content from an external context database.
  • Ingestion points: Data is ingested through the outputs of the ov read, ov find, ov overview, and ov grep commands.
  • Boundary markers: No specific delimiters or safety instructions are defined to separate the retrieved data from the agent's instructions.
  • Capability inventory: The skill is configured to execute shell commands via the ov CLI tool.
  • Sanitization: There is no evidence of sanitization or filtering of the retrieved content before it is provided to the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 10:59 AM