monitor-stream
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The instructions direct the agent to execute a local JavaScript file (
swarm-watch.mjs) located within the plugin's root directory using thenoderuntime via theMonitortool. - [INDIRECT_PROMPT_INJECTION]: The skill processes real-time swarm status events that originate from external tool outputs (
swarm status), which could potentially contain adversarial instructions. - Ingestion points: Output from the
swarm statuscommand processed byswarm-watch.mjsas described inSKILL.md. - Boundary markers: No delimiters or specific warnings are provided to help the agent distinguish between data and instructions.
- Capability inventory: The skill has access to execute local scripts and invoke MCP plugin tools (
mcp__plugin_ruflo-core_*). - Sanitization: No sanitization, filtering, or validation of the incoming swarm data is documented.
Audit Metadata