field-agent
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs extensive interaction with the local environment using the
herdrCLI and thefield.pyscript. It executes commands to manage terminal panes, create git worktrees, and monitor process states via theMonitortool and Python'ssubprocess.runmodule. - [INDIRECT_PROMPT_INJECTION]: The skill architecture establishes a tight feedback loop where a 'handler' agent is responsible for reading and acting on content generated by 'field' agents.
- Ingestion points: The handler agent reads reports from sub-agents using
herdr agent readas part of the Triage workflow inSKILL.md. - Boundary markers: The instructions do not define specific delimiters or security warnings to help the handler agent distinguish between data and instructions when reading reports from field agents.
- Capability inventory: The handler has the capability to execute shell commands, manage git repositories, and spawn additional agents based on the triaged reports.
- Sanitization: No sanitization or validation logic is present to filter malicious instructions that a compromised or adversarial field agent might include in its completion report.
Audit Metadata