dag-task-runner
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
pnpmornpmto install the@cursor/sdkand other development dependencies. These downloads are performed from the official NPM registry to support the runtime execution of the DAG runner.- [COMMAND_EXECUTION]: The skill uses shell scripts to locate runtime components and execute therun_dag.tsscript usingtsx. The runner invokes subagents that interact with the local workspace to perform decomposed tasks.- [PROMPT_INJECTION]: The skill is designed to process user-provided task descriptions and intermediate subagent outputs. It implements a boundary strategy by using markdown delimiters and specific headers to separate upstream context from current task instructions, mitigating the risk of instructions being interpreted as data. - Ingestion points: User-provided goals and the
resultTextfrom preceding tasks in the DAG. - Boundary markers: Employs
---delimiters and structured headers in the context construction logic. - Capability inventory: The orchestrated subagents can modify the filesystem and execute shell commands within the project context.
- Sanitization: Data is truncated to specific character caps, but no content sanitization is applied to LLM outputs.- [DYNAMIC_EXECUTION]: The runner script dynamically generates React source code and writes it to a
.canvas.tsxfile to facilitate real-time UI updates within the IDE. This mechanism is a legitimate use of the platform's visualization capabilities.
Audit Metadata