autoresearch

Warn

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill contains instructions that explicitly direct the agent to bypass human-in-the-loop safety protocols. Directives such as 'CONTINUE — do NOT stop to ask the user' and 'No human approval per iteration' remove the user's ability to review or intervene in the agent's autonomous actions.
  • [COMMAND_EXECUTION]: The autonomous loop relies on the 'Bash' tool to execute user-defined evaluation commands (e.g., 'uv run backtest.py') against code that the agent has just modified. This creates a feedback loop where the agent executes its own modified code without external verification, which is a high-risk dynamic execution pattern.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 18, 2026, 12:07 PM
Security Audit — agent-trust-hub — autoresearch