federation-status
Warn
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
@claude-flow/plugin-agent-federationpackage from the public NPM registry during execution. - [REMOTE_CODE_EXECUTION]: Executes external code via
npx. The use of the@latestversion identifier means the skill always runs the most recent version of the package. This unpinned dependency pattern creates a supply chain risk where any malicious update to the remote package would be automatically executed by the agent. - [COMMAND_EXECUTION]: Invokes shell commands (
ruflo-federation statusandruflo-federation peers) to retrieve diagnostic data about the federation environment. - [PROMPT_INJECTION]: Processes untrusted diagnostic data from external federation peers, including message metrics and trust levels.
- Ingestion points: External peer data retrieved via the
ruflo-federationtool. - Boundary markers: None present; the summarized data is interpolated directly into the agent's summary response.
- Capability inventory: Subprocess execution via
npxand memory search capabilities. - Sanitization: No validation or escaping is performed on the peer-provided metrics before summarization.
Audit Metadata