zenf-tools
Warn
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPERSISTENCEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill schema for the
taskstool includes averification_commandsfield designed to hold arbitrary shell command strings that worker agents are expected to execute to verify their work. - [PERSISTENCE]: The
agentstool allows the definition of worker agents with ascheduleparameter using cron syntax, enabling automated and recurring execution of tasks that could be leveraged for maintaining persistence. - [DATA_EXFILTRATION]: The
docsregistry and thetasksmedia attachment feature allow for the registration and access of files via absolute local paths. This provides a mechanism for an agent to read sensitive files from the host system if specified in a task's configuration. - [DYNAMIC_EXECUTION]: The workflow relies on worker agents dynamically interpreting and executing instructions, phases, and verification commands provided within the task data at runtime.
- [INDIRECT_PROMPT_INJECTION]: The skill involves agents processing complex data structures like task descriptions and acceptance criteria stored in an external daemon, which lacks explicit sanitization or boundary markers to prevent malicious content from influencing the worker agent's behavior.
Audit Metadata