ov-search-context
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
ovCLI tool to perform various database operations, including listing resources (ov ls), searching via semantic find (ov find), and reading full file contents (ov read). These commands are necessary for the skill's core functionality. - [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it retrieves and processes content from an external context database.
- Ingestion points: Data is ingested through the outputs of the
ov read,ov find,ov overview, andov grepcommands. - Boundary markers: No specific delimiters or safety instructions are defined to separate the retrieved data from the agent's instructions.
- Capability inventory: The skill is configured to execute shell commands via the
ovCLI tool. - Sanitization: There is no evidence of sanitization or filtering of the retrieved content before it is provided to the agent.
Audit Metadata