background-agents
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
leverageCLI to perform operations such as checking user authentication status vialeverage whoamiand creating new background agent sessions vialeverage sessions new. - [INDIRECT_PROMPT_INJECTION]: The skill handles user-provided task descriptions and instructions which are passed to a remote cloud environment, creating an attack surface for indirect prompt injection.
- Ingestion points: User input is collected for the session title, space name, and prompt content (task details and instructions) within the
leverage sessions newcommand template. - Boundary markers: No specific boundary markers or 'ignore' instructions are used to encapsulate the user-provided strings.
- Capability inventory: The skill executes shell commands via the
leverageCLI and manages remote agent sessions. - Sanitization: The skill does not perform any sanitization or validation on the user-provided inputs before passing them to the CLI.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
leverage-cloud-agentsskill from theleverage-computer/skillsrepository usingnpxif the necessary CLI tools are missing.
Audit Metadata