director-mode
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The diagnostic script
scripts/director-doctor.pyusessubprocess.runto executegitcommands and verify the installation status of CLI tools (claude,codex,grok) by checking their version information. - [DATA_EXFILTRATION]: The
scripts/director-doctor.pyscript accesses and reads configuration files within user-home directories, such as~/.claude/settings.json,~/.codex/hooks.json, and~/.grok/hooks.json, to report on hook registrations and overall system health for Director Mode. - [PROMPT_INJECTION]: The skill features a surface for indirect prompt injection by processing repository-level configuration data that is then reported to the agent.
- Ingestion points: The script
scripts/director-doctor.pyreads data from JSON configuration files including.claude/settings.json,.codex/hooks.json, and.grok/hooks.json. - Boundary markers: Absent; although data is parsed as JSON, it is not encapsulated in specific protective delimiters when presented in the diagnostic report.
- Capability inventory: The script performs diagnostic
subprocess.runcalls to verify system tools and versions. - Sanitization: The script performs basic JSON structure and data type validation during the reporting process.
Audit Metadata