factory-conductor
Warn
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: MEDIUMPERSISTENCECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [PERSISTENCE]: The skill establishes persistent system tasks to manage agent availability. Evidence:
assets/reentry_timer.pycontains logic to install and uninstall macOS LaunchAgents, systemd user timers/services, and crontab entries. These tasks periodically execute a 'watch' command to resume stalled agent sessions across restarts or logouts.\n- [COMMAND_EXECUTION]: The skill executes shell commands provided in task plans. Evidence:assets/conductor.pyusessubprocess.runto execute 'verify' and 'integration' commands defined intask-plan/v1JSON envelopes.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes structured data that contains executable instructions. Ingestion points:conductor init --plan <envelope>inassets/conductor.pyreads JSON envelopes from the repository. Boundary markers: Present. Commands are stored in specific fields and validated byassets/contract_check.pyagainst 'skill-contract C6' rules. Capability inventory: Extensive use ofsubprocess.run,subprocess.Popen, file system modification, and access to CLI tools like git and gh. Sanitization: Envelopes are validated for schema compliance and structural integrity before any commands are executed.\n- [DYNAMIC_EXECUTION]: Spawns detached processes and resolves interpreters dynamically. Evidence:assets/reentry.pyusessubprocess.Popenwithstart_new_session=Trueto launch agent sessions detached from the conductor process. The Python interpreter path is resolved at runtime based on environment configs.
Audit Metadata