delphi
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runandsubprocess.Popento interface with local authenticated AI CLI tools (claude,codex,kimi,grok,pi) and theherdrvisualization tool. This is the intended mechanism for performing multi-engine consensus tasks. - [DYNAMIC_EXECUTION]: The
engine_legs.pyscript utilizesimportlib.import_moduleto load backend-specific logic (e.g.,codex_backend,claude_backend) dynamically. These modules are part of the skill's own internal library. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided questions and context files which are interpolated into expert prompts. It mitigates injection risks by using structured XML-like boundary markers (e.g.,
<вопрос>,<контекст>) and includes a specialized regex-based guard (codex_guard.py) to block actionable offensive requests before they are sent to the AI engines. - Ingestion points: User-provided question arguments and optional
--context-fileinputs indelphi.pyanddelphi_viz.py. - Boundary markers: Uses explicit
<вопрос>,<контекст>, and<твой-слепой-ответ>tags in prompt construction. - Capability inventory: Can execute shell commands via configured LLM CLIs and write results to a local
node_dirfor visualization. - Sanitization: Implements
codex_guard.pyto filter for offensive subjects paired with produce/run verbs. - [EXTERNAL_DOWNLOADS]: The
deepseek_router.pyutility makes network requests toapi.deepseek.comif aDEEPSEEK_API_KEYis provided. This is used for its documented purpose of routing potentially sensitive prompts away from OpenAI to prevent account flags.
Audit Metadata