herdr-agent-comms
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on executing the
herdrCLI through various shell scripts and Python sub-processes. scripts/next_grid_split.pyusessubprocess.runto callherdr pane layoutandherdr pane resizefor grid management.scripts/wait_for_idle.pyandscripts/preflight_send.pyusesubprocess.runto poll agent status and read transcripts.scripts/broadcast.shuses shell commands to resolve agent names and dispatch tasks viaherdr pane run.- [DATA_EXPOSURE]: The skill accesses Herdr-specific environment variables (
HERDR_PANE_ID,HERDR_TAB_ID,HERDR_WORKSPACE_ID) and reads agent transcripts to coordinate actions. This data is handled locally and remains within the Herdr/agent context. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from sub-agents, creating an attack surface for indirect injection. However, it implements defensive measures such as 'completion markers' (randomly generated strings) to ensure the agent only captures intended replies and distinguishes them from prompt echoes or stale output.
Audit Metadata