to-peer
Warn
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/herdr-tab-peer.shutilizes dynamic execution patterns to process JSON data and resolve workspaces. Specifically, thejqgetfunction employs Python'seval()on arguments passed from the shell. Additionally, the script embeds and executes multi-line Python snippets viapython3 -cat runtime to perform filtering and matching logic. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external instructions via the
--prompt-fileargument or standard input, which are then used as bootstrap prompts for newly created peer agents. This creates a surface where unvetted data can influence agent behavior. - Ingestion points: The
PROMPT_FILEparameter inscripts/herdr-tab-peer.shreads content from user-specified file paths or stdin. - Boundary markers: There are no explicit markers or guardrails implemented to delimit or sanitize the ingested prompt content.
- Capability inventory: The skill has the capability to execute
herdrCLI commands to create system tabs, start new agents, and resolve workspace configurations. - Sanitization: The script does not perform sanitization or validation on the content of the prompt file before passing it to the
herdr agent promptcommand. - [COMMAND_EXECUTION]: The skill relies on executing local shell scripts (
check-env.sh,herdr-tab-peer.sh) and making extensive use of theherdrCLI tool to manage terminal environment state, including support for remote command execution on SSH-connected machines via the--machineflag.
Audit Metadata