mori-agent-bridge
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
moriCLI andtmuxto manage terminal panes and execute commands. Key operations include creating new panes withmori pane new, reading pane history withmori pane readortmux capture-pane, and sending input to processes usingtmux send-keys. - [PROMPT_INJECTION]: The bridge design creates a surface for indirect prompt injection by enabling the agent to read and process output from other terminal panes which might contain untrusted content.
- Ingestion points: Data enters the agent's context through
mori pane readandtmux capture-paneoperations documented inSKILL.md. - Boundary markers: There are no instructions for implementing boundary markers or system-level directives to ignore embedded instructions within the data read from other panes.
- Capability inventory: The agent is granted capabilities to manage pane lifecycles and send arbitrary commands/input to any pane in the session via
tmux send-keys. - Sanitization: The skill does not provide methods for sanitizing, validating, or escaping the content retrieved from panes before it is processed.
Audit Metadata