pueue-job-orchestration
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSPERSISTENCECOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of command execution logs and status metadata via
pueue logandpueue status --json. This creates a surface where untrusted data processed by background jobs (e.g., web data, user-provided files) could inject instructions into the agent's context. - Ingestion points:
pueue log <id>,pueue status --json(referenced inSKILL.mdandreferences/claude-code-integration.md). - Boundary markers: No explicit markers are defined for delimiting log output in the instructions.
- Capability inventory: The skill uses
Bash,Read, andWritetools to manage tasks and process outputs. - Sanitization: No specific sanitization or filtering of command output is described before it is consumed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the
pueuebinaries and installation scripts from external sources. - Source: Fetches the
setup-pueue-linux.shscript from the vendor's repository (github.com/terrylica/rangebar-py). - Source: Downloads official
pueueandpueuedbinaries from the project's GitHub releases (github.com/Nukesor/pueue). - [PERSISTENCE]: The skill includes detailed guides for ensuring the orchestration daemon remains active across reboots and sessions.
- Mechanism: Provides configurations for
systemduser services on Linux (~/.config/systemd/user/pueued.service). - Mechanism: Provides
launchdagent configurations for macOS (~/Library/LaunchAgents/com.nukesor.pueued.plist). - [COMMAND_EXECUTION]: The installation guide suggests piped remote execution for setup purposes.
- Evidence:
curl -sSL https://raw.githubusercontent.com/terrylica/rangebar-py/main/scripts/setup-pueue-linux.sh | bashis used to automate the environment setup on Linux hosts.
Audit Metadata