control-cli
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
tmuxandsubprocess.Popento launch and interact with local command-line applications. These operations are intended for local harness building and profiling as described in the skill purpose. - [DYNAMIC_EXECUTION]: The skill generates and executes temporary shell scripts and Python scripts (using the
ptyandsubprocessmodules) to facilitate automated interactions with interactive terminal sessions. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill reads terminal output through
tmux capture-paneand by reading from PTY master file descriptors inSKILL.md. - Boundary markers: The instructions suggest waiting for specific text patterns or prompts to delimit interactions, but these are not robust security boundaries.
- Capability inventory: The skill has the ability to execute commands, send keyboard input to sessions, and interact with the local filesystem and loopback network interfaces (via Node/Bun inspectors).
- Sanitization: The provided script templates do not demonstrate sanitization or escaping of the terminal output before it is processed or used to trigger subsequent actions.
Audit Metadata