missions
Fail
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: HIGHCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes automated shell commands for project management and development workflows.
- Evidence:
scripts/missions.shcontains logic to detect and run project scripts likenpm run test,lint, andtypecheckbased onpackage.jsoncontent. - Evidence: The script manages Git worktrees using
git worktree add,remove, andmergecommands. - [REMOTE_CODE_EXECUTION]: Sub-agents are launched with high-privilege flags that bypass standard security boundaries.
- Evidence:
scripts/missions.shexecutes theclaudeCLI with the--dangerously-skip-permissionsflag. - Evidence:
scripts/missions.shexecutes thecodexCLI with the--dangerously-bypass-approvals-and-sandboxflag. - Technical Impact: This configuration allows sub-agents to perform any tool-based action (file modification, network requests, command execution) without requesting user permission, enabling autonomous operation at the cost of significant security oversight.
- [EXTERNAL_DOWNLOADS]: The skill automates the installation of external software dependencies.
- Evidence: The
pm_installfunction inscripts/missions.shruns package manager install commands (npm install,pnpm install, etc.) autonomously when setting up worker worktrees.
Recommendations
- AI detected serious security threats
Audit Metadata