squad-batch-run
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The skill accesses local configuration and authentication files located at
~/.squad/authand~/.squad/configto retrieve user credentials and API settings for the Squad platform. - [COMMAND_EXECUTION]: Executes several shell commands to manage the batch workflow:
curlis used to verify connectivity to the task board and log activity events.python3executes the localscripts/plan_batch.pyscript to resolve task ordering.gitcommands (git status,git diff) are used to check for workspace conflicts and verify implementation results.- [EXTERNAL_DOWNLOADS]: Fetches task metadata, dependency relationships, and status information from the vendor's API (defaulting to
steloit-squad.vercel.app). This data is used to plan the execution order and determine parallelization safety. - [INDIRECT_PROMPT_INJECTION_SURFACE]: The skill parses free-text task descriptions from the remote API for specific metadata tags (e.g.,
Parallel-safe: yes,Touches: module). - Ingestion points: Task descriptions retrieved via
urllibinscripts/plan_batch.py. - Boundary markers: None; descriptions are parsed directly using regular expressions.
- Capability inventory: The skill can trigger sub-skills (
squad-run,squad-refine) and execute shell commands (curl,git). - Sanitization: No sanitization is performed on the ingested task metadata before it influences the planning logic.
Audit Metadata