code-task

Warn

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: Invokes the opensquilla CLI tool through an absolute Python interpreter path (/abs/path/python -P -m opensquilla.cli.main) to perform repository management and code editing tasks.
  • [REMOTE_CODE_EXECUTION]: Clones code from remote Git repositories and executes their native toolchains (such as npm ci, npm run build, and pytest) directly on the host system. The skill explicitly notes the lack of a sandbox environment for these operations.
  • [EXTERNAL_DOWNLOADS]: Fetches source code from remote Git URLs and retrieves issue descriptions and commentary through the GitHub CLI (gh).
  • [PROMPT_INJECTION]: Exposed to indirect prompt injection via the ingestion of untrusted data from external codebases and GitHub issue threads.
  • Ingestion points: Data is brought into the environment from Git repositories, GitHub issues, and issue comments.
  • Boundary markers: None identified; there are no clear delimiters or instructions provided to the agent to treat external data as untrusted.
  • Capability inventory: The skill possesses exec_command, background_process, and file system write capabilities.
  • Sanitization: The skill does not implement sanitization or filtering for the data ingested from external sources.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 1, 2026, 09:26 AM
Security Audit — agent-trust-hub — code-task