thrifty-dispatch
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The
dispatch.pyscript executes shell commands through therun_gatefunction usingsubprocess.run(shell=True). These commands, typically project build or test suites likenode --test, are provided via command-line arguments when the AI orchestrator initiates the verification phase. - [DATA_EXFILTRATION]: The
dispatch.pyscript reads the contents of source code files (supporting extensions such as .js, .py, .go, .ts) within the workspace. This is used in thefixfunction to provide context to the LLM for diagnosing and repairing test failures. - [PROMPT_INJECTION]: The skill processes external files (
spec.mdandagenda.md) as primary input for its planning phase. These files are interpolated into prompts for the Sonnet model, creating an indirect prompt injection surface where malicious instructions in the specifications could influence the generated build plan or the resulting code. - [EXTERNAL_DOWNLOADS]: The skill relies on the
claudeCLI tool to perform model calls. The Python script executes this local command to communicate with Anthropic's models using the host's existing authentication, avoiding the use of hardcoded API keys.
Audit Metadata