orchestrate

Pass

Audited by Gen Agent Trust Hub on May 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: Employs tmux to manage multiple agent windows, using send-keys to automate tasks and capture-pane to monitor agent progress and state.
  • [COMMAND_EXECUTION]: Relies on a suite of local bash scripts (e.g., spawn-agent.sh, recycle-agent.sh, poll-cycle.sh) to manage the lifecycle of agents and git worktrees.
  • [EXTERNAL_DOWNLOADS]: Interacts with GitHub APIs via the gh CLI and GraphQL to fetch pull request metadata, CI check statuses, and review thread information for task verification.
  • [DATA_EXFILTRATION]: Sends task updates and completion notifications to external Discord webhooks as configured by the user in the environment or state file.
  • [CREDENTIALS_UNSAFE]: Maintains a local state file at ~/.claude/orchestrator-state.json which stores Claude session IDs and objective data required for session persistence and recovery.
  • [PROMPT_INJECTION]: Monitors sub-agent output captured from tmux panes to transition between states, which represents an indirect prompt injection surface if sub-agents process untrusted external data.
Audit Metadata
Risk Level
SAFE
Analyzed
May 6, 2026, 03:28 PM
Security Audit — agent-trust-hub — orchestrate