agent-router-setup
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to resolve project roots, verify skill assets, and execute shell scripts for environment setup. - [COMMAND_EXECUTION]: During installation and configuration, the skill utilizes
node -eto perform programmatic modifications to the project'ssettings.jsonandagent-router.jsonfiles. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a potential attack surface for indirect prompt injection by reading and processing local agent definition files.
- Ingestion points: The routing hook and the Tier 2 judge read agent names, descriptions, and triggers from files located in
.claude/agents/*.md. - Boundary markers: No specific delimiters or warnings are applied to the agent metadata when it is processed.
- Capability inventory: The skill is equipped with
Read,Bash, andAgenttools. The background hook is designed with limited capabilities, restricted to local reads and writing to a user-owned temporary directory. - Sanitization: Input text is normalized through lower-casing and punctuation removal in the deterministic routing logic.
- [DYNAMIC_EXECUTION]: The skill generates and installs an executable JavaScript file (
agent-router.mjs) into the project's local directory to serve as a session hook.
Audit Metadata