agent-composer
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands via the
Bashtool and uses thefh-runCLI to manage agent dispatches. - [EXTERNAL_DOWNLOADS]: Fetches and executes the
@chrono-meta/fh-gatepackage from the npm registry using thenpxutility (SKILL.md). - [DYNAMIC_EXECUTION]: Dynamically assembles agent briefs, context cards, and execution plans at runtime, which are then processed via the
Agenttool or thefh-runcommand. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Reads capability definitions and project context from files such as
.claude/agents/*.md,LOCAL_SKILL_REGISTRY.md,.mcp.json, andCLAUDE.md(SKILL.md, SKILL_detail.md). - Boundary markers: Utilizes
Session Context Cardsand a token-limitedAgent Registryto provide context to isolated sub-agents. - Capability inventory: The skill has access to file system reading (
Read,Glob,Grep), shell execution (Bash), and agent/skill invocation (Agent,Skill). - Sanitization: No specific sanitization or validation logic is defined for the content extracted from local registry or configuration files.
Audit Metadata