openhands
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the 'openhands' package from the official Python package registry using the 'uv' tool. This is a standard procedure for installing the required CLI tool.
- [COMMAND_EXECUTION]: The skill uses the 'terminal' tool to run the OpenHands CLI. It passes user-defined tasks and environment variables (such as LLM_API_KEY) to the tool. This is the intended functionality for delegating coding tasks to a sub-agent.
- [INDIRECT_PROMPT_INJECTION]: The skill provides an interface for passing user instructions to the OpenHands agent. While the sub-agent has capabilities to modify files and execute commands (documented in the JSON Event Schema as FileEditorAction and TerminalAction), this risk is inherent to the delegation of tasks to autonomous agents. The skill operates within the user-specified workspace directory.
Audit Metadata