gpt-engineer-spark

Pass

Audited by Gen Agent Trust Hub on Sep 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run and subprocess.Popen in run_spark_agent.py and run_spark_fleet.py to execute git commands and the codex CLI. These operations are essential for managing subagent environments and executing tasks. Commands are constructed using list-based arguments to prevent shell injection.\n- [EXTERNAL_DOWNLOADS]: The skill references documentation and features of the OpenAI Codex platform in references/codex-spark.md. It requires the codex executable to be present on the system. All external references target official OpenAI services (learn.chatgpt.com).\n- [PERSISTENCE]: The bootstrap.py script installs agent profile TOML files into ~/.codex/agents or a project-level .codex/agents directory. This configuration is necessary to enable the specific Spark subagent roles defined by the skill.\n- [INDIRECT_PROMPT_INJECTION]: The subagents orchestrated by this skill process content from the local repository. Ingestion points: Subagents read repository files via the Codex CLI as configured in run_spark_agent.py and the profile TOML files. Boundary markers: Explicit instructions in run_spark_agent.py and the role-specific TOMLs command subagents to stay within assigned tasks and authority. Capability inventory: The skill uses subprocess calls for git and codex operations, writes evidence to the local filesystem, and manages candidate worktrees. Sanitization: The skill mitigates risks by using restricted sandbox modes (read-only or workspace-write), disabling network access for writer roles, and utilizing isolated candidate worktrees to ensure changes are reviewed by the main agent before integration.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 13, 2026, 10:57 AM
Security Audit — agent-trust-hub — gpt-engineer-spark