agent-v3-security-architect
Warn
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill's
post_executionhook usesnpx agentic-flow@alphato download and run code from the npm registry at runtime. Executing unverified packages from external registries introduces a supply chain risk, especially when using unstable alpha versions. - [COMMAND_EXECUTION]: The
post_executionhook interpolates the$TASKenvironment variable directly into a shell command line:npx agentic-flow@alpha memory store-pattern ... --task "Security Architecture: $TASK". If the task description provided by the user contains shell control characters (e.g., semicolons, backticks, or pipes), it could allow for arbitrary command execution. - [DATA_EXFILTRATION]: The skill transmits session identifiers and task descriptions to the
agentic-flowutility during its post-execution phase. This mechanism represents a data exfiltration vector where task-related metadata is sent to an external process without explicit user consent.
Audit Metadata