control-cli
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides templates for the agent to execute shell commands using
tmux(e.g.,tmux new-session,send-keys,capture-pane) to interact with and inspect local processes. - [DYNAMIC_EXECUTION]: The skill instructs the agent to generate and run temporary Python and Bash scripts at runtime. The Python template uses
pty.openpty()andsubprocess.Popen()to create a pseudo-terminal for driving interactive applications. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it captures output from external processes (
tmux capture-pane,os.read(master_fd, 4096)) and processes it to determine the next action. - Ingestion points: Terminal output is captured via
tmuxand Python PTY buffers and printed/evaluated by the agent. - Boundary markers: None present in the provided templates to distinguish between process output and agent instructions.
- Capability inventory: The agent is granted capabilities to execute shell commands, spawn subprocesses, and manage local terminal sessions.
- Sanitization: No sanitization or filtering of the captured terminal output is implemented before it is processed by the agent.
Audit Metadata