spawn
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script (
session_manager.py) to manage the lifecycle and status of agent sessions. This is a standard administrative function for this skill type. - [INDIRECT_PROMPT_INJECTION]: The skill interpolates session data and template content into subagent prompts, creating a potential surface for indirect instructions.
- Ingestion points: Data is loaded from
.agenthub/sessions/{session-id}/config.yamland template files in../agenthub/references/agent-templates.md. - Boundary markers: The dispatch prompt uses basic variable substitution (e.g.,
{task},{variables}) without explicit instruction boundary delimiters. - Capability inventory: The skill has the ability to spawn new agent instances via the
Agenttool and perform filesystem writes to the.agenthub/board/directory. - Sanitization: The skill lacks explicit sanitization for interpolated session variables, though it enforces strict filesystem isolation (git worktrees) for the resulting agents.
- [SAFE]: The skill enforces security best practices for parallel agent execution, specifically requiring mandatory
isolation: "worktree"to prevent cross-agent data contamination and filesystem interference.
Audit Metadata