zcode-delegate

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The relay.mjs script executes the zcode CLI and git to facilitate task delegation and state monitoring.
  • [DYNAMIC_EXECUTION]: The path to the zcode CLI is dynamically resolved at runtime from environment variables, flags, or default installation paths. The script includes a security check to block shell shims (.cmd/.bat) on Windows to prevent command hijacking.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided 'briefs' which are passed to an external agent. This creates an inherent surface for indirect prompt injection where instructions in the brief could influence the behavior of the ZCode implementer.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 08:32 AM