zcode-delegate
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
relay.mjsscript executes thezcodeCLI andgitto facilitate task delegation and state monitoring. - [DYNAMIC_EXECUTION]: The path to the
zcodeCLI is dynamically resolved at runtime from environment variables, flags, or default installation paths. The script includes a security check to block shell shims (.cmd/.bat) on Windows to prevent command hijacking. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided 'briefs' which are passed to an external agent. This creates an inherent surface for indirect prompt injection where instructions in the brief could influence the behavior of the ZCode implementer.
Audit Metadata