dryad
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a coordination tool for managing Git worktrees and project environments. It operates locally and does not engage in unauthorized network activity or remote script execution.\n- [COMMAND_EXECUTION]: The skill facilitates environment setup using standard shell patterns and local Git operations. It uses a shell evaluation pattern (
eval "$(dryad seat ... --shell)") to set up local environment variables for the worker's session, which is restricted to the tool's own generated output.\n- [INDIRECT_PROMPT_INJECTION]: The tool ingests task descriptions provided by the user or orchestrator. While these descriptions are stored and displayed, the skill does not interpret them as executable instructions for its own operations, and it provides guidelines for workers to maintain boundaries between separate seats.
Audit Metadata