herdr-throwaway-repro
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Instructions involve using the
herdrCLI and shell environment commands (env,test) to manage isolated sessions, panes, and processes. This behavior is consistent with the skill's stated purpose of providing a reproduction harness. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface by ingesting potentially untrusted data through agent prompts and terminal reads.
- Ingestion points: Data enters through
agent prompt,agent read, andpane readcommands mentioned inSKILL.md. - Boundary markers: The skill does not define explicit delimiters or instructions to ignore embedded commands within the processed data.
- Capability inventory: The skill utilizes
herdr pane runandagent startinSKILL.md, allowing for shell command execution and process management within the session. - Sanitization: There is no evidence of sanitization or filtering of external content before it is interpolated into commands or prompts.
Audit Metadata