router
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
run_commandtool to execute theagyCLI, which is the primary mechanism for dispatching background worker tasks. - [DYNAMIC_EXECUTION]: Shell commands for the
agyCLI are dynamically assembled at runtime, incorporating model selection, effort levels, and task-specific prompts. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it ingests user-provided tasks and interpolates them into worker prompts.
- Ingestion points: User input provided via the
routercommand is processed and passed to background workers. - Boundary markers: The skill uses the
-p="..."flag in the CLI to encapsulate prompts, but does not specify explicit escape sequences for untrusted content within those strings. - Capability inventory: The skill uses
run_command(for CLI execution),manage_task(for lifecycle management), and reads/writes temporary files in/tmp. - Sanitization: No specific sanitization or filtering logic is defined for the user-supplied task descriptions before they are passed to the
agycommand.
Audit Metadata