agent-field-kit
Warn
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]:
scripts/install.shmodifies system-level shell configuration files (.bashrc,.zshrc) to source a custom environment file, providing persistence for the toolkit. - [COMMAND_EXECUTION]:
scripts/install.shutilizessudo apt-getfor package management and executesevalon shell integration strings generated by thentmutility. - [EXTERNAL_DOWNLOADS]: The installation script fetches and installs software from various external sources, including the public NPM registry (
agentmail-cli) and a third-party Homebrew tap (dicklesworthstone/tap/dcg). - [CREDENTIALS_UNSAFE]:
scripts/model-cache.shandscripts/dispatch.shaccess and utilize a large number of sensitive environment variables containing API keys for providers like OpenAI, Anthropic, Google, and others.model-cache.shautomatically probes external endpoints using these credentials to discover available models. - [PROMPT_INJECTION]:
scripts/dispatch.shincludes a dispatcher command for an autonomous agent that uses--yoloand--trustflags, which are typically used to bypass safety filters and user confirmation steps. - [COMMAND_EXECUTION]:
scripts/model-cache.shattempts to execute an external binary located in another skill's directory:~/.agents/skills/tribunal/bin/detect-runners.
Audit Metadata