agent-swarm
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on shell commands to manage agent sessions and repository state.
- Uses
tmux send-keysto dispatch instructions and control worker agent sessions across multiple terminal windows. - Employs
git worktreefor isolating the file system environment of each parallel agent. - Utilizes platform CLIs (
ghandglab) to interact with issue trackers and pull request systems. - Inspects process environments (
/proc/$pid/environorps eww) to discoverCLAUDE_CONFIG_DIRfor account quota management. - [PROMPT_INJECTION]: The skill defines a workflow where agents ingest and process untrusted data from external sources.
- Ingestion points: Issues and comments are fetched from GitHub or GitLab via
gh issue viewandglab api(documented inworker.mdandorchestrator.md). - Boundary markers: The skill mandates the use of orchestrator signatures (e.g.,
--- ORCHESTRATOR (round N) ---) to distinguish legitimate instructions from UI-generated suggestions or external content (provenance.md). - Capability inventory: Agents have access to
git,tmux, and tracker CLIs, allowing for repository modification and further command execution. - Sanitization: The skill recommends using files for pull request body edits to prevent shell injection during command-line interaction (
trackers.md).
Audit Metadata