offload
Fail
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The
dispatch.shscript executes an external binary namedcodexusing the--dangerously-bypass-approvals-and-sandboxflag. This configuration explicitly disables the security sandbox and suppresses all approval requirements for the sub-agent, allowing it to execute arbitrary commands, access the full file system, and perform network operations without user oversight. - [COMMAND_EXECUTION]: The skill invokes multiple system utilities and shell commands:
gitis executed inhandoff.mjsto retrieve project metadata.tmuxis used indispatch.shto create new terminal windows for builder processes.osascriptis used on macOS to script the Terminal application.bashis used to execute dynamically generated launch scripts created viamktemp.- [EXTERNAL_DOWNLOADS]: The skill imports local code from
../session-budget/mailbox.mjsindir.mjs. This file is not included in the skill package, making the logic that handles file path computation and data isolation unverifiable.
Recommendations
- AI detected serious security threats
Audit Metadata