autogpt-agents
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches source code from the official AutoGPT GitHub repository.\n
- Evidence:
git clone https://github.com/Significant-Gravitas/AutoGPT.gitinSKILL.md.\n- [COMMAND_EXECUTION]: Uses Docker, npm, and poetry for platform deployment and environment management.\n - Evidence: Usage of
docker compose,npm install, andpoetry runinSKILL.mdandtroubleshooting.md.\n- [PRIVILEGE_ESCALATION]: Documentation includes maintenance commands requiring administrative access for system services and firewalls.\n - Evidence:
sudo systemctl start dockerandsudo ufw allow 8001introubleshooting.md.\n- [DYNAMIC_EXECUTION]: Allows registration of custom functional blocks and dynamic construction of agent graphs.\n - Evidence: Examples for
MyCustomBlockandcreate_dynamic_graphinadvanced-usage.md.\n- [INDIRECT_PROMPT_INJECTION]: The platform architecture includes an attack surface for instructions embedded in processed data.\n - Ingestion points: Data entering through webhooks and integration connectors in
SKILL.md.\n - Boundary markers: Block implementation examples lack explicit delimiters for external data interpolation.\n
- Capability inventory: Support for custom block logic, network requests, and database access across
advanced-usage.mdandtroubleshooting.md.\n - Sanitization: Mention of input sanitization for monitoring purposes, but lacks universal validation logic for agent execution.
Audit Metadata