orchestrate
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: Employs
tmuxto manage multiple agent windows, usingsend-keysto automate tasks andcapture-paneto monitor agent progress and state. - [COMMAND_EXECUTION]: Relies on a suite of local bash scripts (e.g.,
spawn-agent.sh,recycle-agent.sh,poll-cycle.sh) to manage the lifecycle of agents and git worktrees. - [EXTERNAL_DOWNLOADS]: Interacts with GitHub APIs via the
ghCLI and GraphQL to fetch pull request metadata, CI check statuses, and review thread information for task verification. - [DATA_EXFILTRATION]: Sends task updates and completion notifications to external Discord webhooks as configured by the user in the environment or state file.
- [CREDENTIALS_UNSAFE]: Maintains a local state file at
~/.claude/orchestrator-state.jsonwhich stores Claude session IDs and objective data required for session persistence and recovery. - [PROMPT_INJECTION]: Monitors sub-agent output captured from tmux panes to transition between states, which represents an indirect prompt injection surface if sub-agents process untrusted external data.
Audit Metadata