using-atm
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill dispatches instructions and manages task lifecycles by executing commands within tmux panes using the
atm sendandtmux send-keysutilities. - [COMMAND_EXECUTION]: Monitors and manages local agent processes using
psandatm killto ensure the health and convergence of the orchestration swarm. - [INDIRECT_PROMPT_INJECTION]: The skill processes task data and coordination messages from external sources that represent an attack surface for indirect injection.
- Ingestion points: Data is ingested from Agent Mail (
am mail inbox), the beads work queue (br ready), and GitHub PR metadata (gh pr list). - Boundary markers: No explicit delimiters are specified to distinguish between data and control instructions from these sources.
- Capability inventory: The skill can execute commands in terminal panes, manipulate Git repositories, and manage local process states.
- Sanitization: No specific sanitization or validation routines are described for data received from coordination layers.
- Ingestion points: Data is ingested from Agent Mail (
Audit Metadata