autogpt-agents
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The troubleshooting guide recommends using privileged commands like
sudo systemctl start dockerandsudo ufw allow 8001to manage local system services and networking. - [COMMAND_EXECUTION]: The skill includes instructions for common administrative tasks such as terminating processes using
kill -9and managing application lifecycles viadocker composeandnpmscripts. - [EXTERNAL_DOWNLOADS]: The documentation directs users to clone the platform source code from the official project repository at
https://github.com/Significant-Gravitas/AutoGPT.git. - [DYNAMIC_EXECUTION]: The core platform functionality relies on a graph-based execution engine that dynamically coordinates logic blocks, subgraphs, and ability scripts at runtime.
- [INDIRECT_PROMPT_INJECTION]: The skill describes an autonomous agent platform that ingests data from external sources, presenting an inherent surface for indirect prompt injection.
- Ingestion points: Data enters the system context through
Webhookblocks,HTTP requestblocks, and external integrations with services like GitHub, Discord, and Notion. - Boundary markers: The provided code examples and documentation do not demonstrate the use of specific delimiters or system instructions to differentiate between user-supplied data and agent instructions.
- Capability inventory: The platform's
executorandForgetoolkit possess extensive capabilities, including network access, modular Python ability execution, and tool orchestration. - Sanitization: While referencing sanitized inputs in logging examples, the skill does not detail explicit validation or escaping mechanisms for content ingested via external blocks.
Audit Metadata