managed-agent
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
managed_agent_createtool allows for the installation of arbitrary software packages from multiple registries including pip, npm, apt, cargo, gem, and go within the managed container environment. - [REMOTE_CODE_EXECUTION]: The skill enables remote code execution through the
initScriptparameter in themanaged_agent_createtool, which runs code during the initialization of the cloud session. - [COMMAND_EXECUTION]: The skill provides access to the
Bashtool and facilitates the execution of shell commands within the cloud-hosted agent environment via themanaged_agent_prompttool. - [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface by processing external messages that drive an agent with significant system-level capabilities.
- Ingestion points: The
messageargument in themanaged_agent_prompttool (SKILL.md). - Boundary markers: No specific delimiters or safety instructions are defined to separate user data from agent instructions.
- Capability inventory:
managed_agent_create(package installation, initialization scripts) and theBashtool (SKILL.md). - Sanitization: No input validation or sanitization logic is specified in the skill configuration.
- [NO_CODE]: The skill consists entirely of markdown instructions and tool declarations in SKILL.md and does not provide any external scripts or binary files.
Audit Metadata