ce-pov
Warn
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: MEDIUMPROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill setup script (
scripts/context.mjs) injects directives that explicitly instruct the AI agent to bypass or override harness-level security constraints. Specifically, it tells the agent to authorize the spawning of subagents without user confirmation and to disregard system prompt instructions regarding autonomous operation or user absence.- [COMMAND_EXECUTION]: The skill uses a sophisticated suite of shell and Python scripts for task orchestration. It manages detached process lifecycles viapeer-job-runner.pyusing low-level primitives likeos.forkandos.setsidon POSIX or Job Objects on Windows. It executes external CLI tools for AI providers such as Claude, OpenAI (Codex), and xAI (Grok) to perform cross-model analysis.- [DYNAMIC_EXECUTION]: Thescripts/cross-model-pov.shscript dynamically executes Python code to parse JSON output from command-line tools. Thepeer-job-runner.pyscript is designed to execute and supervise arbitrary worker commands passed as arguments, utilizingsubprocess.runandsubprocess.Popenfor execution.- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill gathers project context (code, logs, and issues) and transmits it to external AI model providers via their respective CLI tools for verification. While these are well-known services, the flow involves sending internal project information to remote third-party endpoints.
Audit Metadata