autogen-collab
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runinautogen_runner.pyto call theopenclawcommand-line tool. This is the primary method for invoking agents and routing LLM calls. The implementation uses a list of arguments rather than a raw shell string, which is a standard security practice to prevent command injection. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface. The
build_contextfunction inautogen_runner.pyaggregates user-provided tasks and responses from multiple agents into a single prompt for the next turn. While this is necessary for a debate workflow, it allows one agent's response to potentially influence or override the instructions of another if not carefully monitored.
Audit Metadata