danteterm
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
dshCLI to manage terminal blocks and tabs. Thescripts/danteterm_delegate.pyscript usessubprocess.runto execute these commands, which is necessary for the skill's primary functionality within the DanteTerm environment. - [INDIRECT_PROMPT_INJECTION]: The delegation feature involves passing prompts to sub-agents and reading their output. The script facilitates this by reading scrollback or redirected result files.
- Ingestion points: Data enters the context via
dsh termscrollbackoutput or reading temporary result files inscripts/danteterm_delegate.py. - Boundary markers: The skill does not implement specific delimiters for external agent output.
- Capability inventory: The skill can execute commands via
dsh, create/delete blocks, and manage files viadsh file. - Sanitization: The script uses
shlex.quoteto sanitize prompts passed to sub-agents, mitigating command injection into the shell environment of the delegated block. - [DYNAMIC_EXECUTION]: The delegation script dynamically constructs shell commands to redirect agent output to temporary files and signal completion. These commands are assembled using fixed templates and sanitized user input, representing a standard orchestration pattern for terminal-based automation.
Audit Metadata