distributed-job-safety
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTIONREMOTE_CODE_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous templates and instructions for executing shell commands locally and remotely via SSH, pueue, and systemd-run. This includes complex piped operations and batch command execution.
- [PERSISTENCE]: Recommends the use of
systemctl --user enable --now pueuedto ensure the job management daemon (pueued) persists on the host across reboots. - [INDIRECT_PROMPT_INJECTION]: The skill documents patterns for interpolating user-controlled parameters such as symbols, thresholds, and date ranges directly into filenames and shell commands.
- Ingestion points: Parameters used in job labels and filenames in
SKILL.md(e.g.,{symbol}_{threshold}). - Boundary markers: Absent; the templates do not use specific delimiters or warnings to prevent the interpretation of instructions embedded in these parameters.
- Capability inventory: Extensive local and remote command execution via
pueue,bash,ssh, andsystemd-runas specified inallowed-tools. - Sanitization: Absent; the skill assumes valid inputs and does not provide patterns for escaping or validating the content of interpolated parameters.
- [REMOTE_CODE_EXECUTION]: Deployment protocols include fetching code from remote Git repositories and installing packages via
uv pip installfrom external registries. - [DYNAMIC_EXECUTION]: Suggests the use of
eval "$(mise env)"for loading environment configurations andxargs -I{} bash -c '{}'for executing batches of commands stored in a file.
Audit Metadata