autogen
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: Several diagnostic scripts utilize dynamic module loading to verify the presence of AutoGen extensions and verify API signatures.
scripts/inspect_autogen_install.pyusesimportlib.import_moduleto check installed distributions.sub-skills/agentchat-workflows/scripts/agentchat_smoke.pyuses__import__to inspect agent and team class signatures.sub-skills/extensions-integrations/scripts/inspect_extensions.pyusesimportlib.import_moduleandimportlib.util.find_specto verify the availability of optional integration modules.- [COMMAND_EXECUTION]: The skill includes utilities to verify CLI tools by executing their help commands via subprocesses.
scripts/inspect_autogen_install.pyandsub-skills/tools-studio-bench/scripts/inspect_tooling.pyexecute commands such asagbench --help,autogenstudio --help, andm1 --helpto report on environment availability.- [INDIRECT_PROMPT_INJECTION]: The skill manages a framework capable of processing and executing model-generated content, creating an inherent surface for indirect prompt injection. The documentation mitigates this by providing best practices for:
- Configuring deterministic termination conditions (
max_turns,MaxMessageTermination). - Using isolated Docker environments for code execution instead of the host machine.
- Implementing human-in-the-loop approval functions for sensitive operations.
- Validating inputs for MCP (Model Context Protocol) servers.
Audit Metadata