hatchet-cli
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches an installation script from the vendor's official installation domain at
install.hatchet.run. - [REMOTE_CODE_EXECUTION]: The skill instructs the user to pipe a remote shell script from
install.hatchet.rundirectly intobashto install the Hatchet CLI. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data that could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: The agent is instructed to fetch and read workflow state, event logs, and application logs using
hatchet runs get,hatchet runs events, andhatchet runs logsas described indebug-run.mdandtrigger-and-watch.md. - Boundary markers: None; the agent processes raw JSON and log output without specific delimiters or warnings to ignore instructions embedded in the logs.
- Capability inventory: The skill allows the agent to execute shell commands via the
hatchetCLI, trigger new workflows, and write to temporary files on the local system. - Sanitization: No sanitization or filtering of the log/event content is mentioned before the agent interprets the data.
Audit Metadata